diff --git a/eng/mgmt/mgmtmetadata/security_resource-manager.txt b/eng/mgmt/mgmtmetadata/security_resource-manager.txt index 74a0ee7d05e1..bb5603c07904 100644 --- a/eng/mgmt/mgmtmetadata/security_resource-manager.txt +++ b/eng/mgmt/mgmtmetadata/security_resource-manager.txt @@ -3,12 +3,12 @@ AutoRest installed successfully. Commencing code generation Generating CSharp code Executing AutoRest command -cmd.exe /c autorest.cmd https://github.com/Azure/azure-rest-api-specs/blob/master/specification/security/resource-manager/readme.md --csharp --version=latest --reflect-api-versions --csharp-sdks-folder=C:\git\azure-sdk-for-net\sdk -2019-09-18 07:13:49 UTC +cmd.exe /c autorest.cmd https://github.com/Azure/azure-rest-api-specs/blob/master/specification/security/resource-manager/readme.md --csharp --version=latest --reflect-api-versions --csharp-sdks-folder=C:\github\liran\azure-sdk-for-net\sdk +2019-11-07 13:57:09 UTC Azure-rest-api-specs repository information GitHub fork: Azure Branch: master -Commit: 626308502df9fd4b4a7fafed44eceba9ee7ef1bf +Commit: 80a458c51677166e259b90316678e16c1ec614a0 AutoRest information Requested version: latest -Bootstrapper version: autorest@2.0.4283 +Bootstrapper version: autorest@2.0.4407 diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/IJitNetworkAccessPoliciesOperations.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/IJitNetworkAccessPoliciesOperations.cs index 44a7354265cc..189cf30a96de 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/IJitNetworkAccessPoliciesOperations.cs +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/IJitNetworkAccessPoliciesOperations.cs @@ -204,6 +204,9 @@ public partial interface IJitNetworkAccessPoliciesOperations /// /// A list of virtual machines & ports to open access for /// + /// + /// The justification for making the initiate request + /// /// /// The headers that will be added to request. /// @@ -219,7 +222,7 @@ public partial interface IJitNetworkAccessPoliciesOperations /// /// Thrown when a required parameter is null /// - Task> InitiateWithHttpMessagesAsync(string resourceGroupName, string jitNetworkAccessPolicyName, IList virtualMachines, Dictionary> customHeaders = null, CancellationToken cancellationToken = default(CancellationToken)); + Task> InitiateWithHttpMessagesAsync(string resourceGroupName, string jitNetworkAccessPolicyName, IList virtualMachines, string justification = default(string), Dictionary> customHeaders = null, CancellationToken cancellationToken = default(CancellationToken)); /// /// Policies for protecting resources using Just-in-Time access /// control. diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/ISecurityCenterClient.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/ISecurityCenterClient.cs index 907fbb65724e..a77d13870131 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/ISecurityCenterClient.cs +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/ISecurityCenterClient.cs @@ -211,5 +211,10 @@ public partial interface ISecurityCenterClient : System.IDisposable /// IServerVulnerabilityAssessmentOperations ServerVulnerabilityAssessment { get; } + /// + /// Gets the ISubAssessmentsOperations. + /// + ISubAssessmentsOperations SubAssessments { get; } + } } diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/ISubAssessmentsOperations.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/ISubAssessmentsOperations.cs new file mode 100644 index 000000000000..99b971666525 --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/ISubAssessmentsOperations.cs @@ -0,0 +1,156 @@ +// +// Copyright (c) Microsoft Corporation. All rights reserved. +// Licensed under the MIT License. See License.txt in the project root for +// license information. +// +// Code generated by Microsoft (R) AutoRest Code Generator. +// Changes may cause incorrect behavior and will be lost if the code is +// regenerated. +// + +namespace Microsoft.Azure.Management.Security +{ + using Microsoft.Rest; + using Microsoft.Rest.Azure; + using Models; + using System.Collections; + using System.Collections.Generic; + using System.Threading; + using System.Threading.Tasks; + + /// + /// SubAssessmentsOperations operations. + /// + public partial interface ISubAssessmentsOperations + { + /// + /// Get security sub-assessments on all your scanned resources inside a + /// subscription scope + /// + /// + /// Scope of the query, can be subscription + /// (/subscriptions/0b06d9ea-afe6-4779-bd59-30e5c2d9d13f) or management + /// group (/providers/Microsoft.Management/managementGroups/mgName). + /// + /// + /// The headers that will be added to request. + /// + /// + /// The cancellation token. + /// + /// + /// Thrown when the operation returned an invalid status code + /// + /// + /// Thrown when unable to deserialize the response + /// + /// + /// Thrown when a required parameter is null + /// + Task>> ListAllWithHttpMessagesAsync(string scope, Dictionary> customHeaders = null, CancellationToken cancellationToken = default(CancellationToken)); + /// + /// Get security sub-assessments on all your scanned resources inside a + /// scope + /// + /// + /// Scope of the query, can be subscription + /// (/subscriptions/0b06d9ea-afe6-4779-bd59-30e5c2d9d13f) or management + /// group (/providers/Microsoft.Management/managementGroups/mgName). + /// + /// + /// The Assessment Key - Unique key for the assessment type + /// + /// + /// The headers that will be added to request. + /// + /// + /// The cancellation token. + /// + /// + /// Thrown when the operation returned an invalid status code + /// + /// + /// Thrown when unable to deserialize the response + /// + /// + /// Thrown when a required parameter is null + /// + Task>> ListWithHttpMessagesAsync(string scope, string assessmentName, Dictionary> customHeaders = null, CancellationToken cancellationToken = default(CancellationToken)); + /// + /// Get a security sub-assessment on your scanned resource + /// + /// + /// Scope of the query, can be subscription + /// (/subscriptions/0b06d9ea-afe6-4779-bd59-30e5c2d9d13f) or management + /// group (/providers/Microsoft.Management/managementGroups/mgName). + /// + /// + /// The Assessment Key - Unique key for the assessment type + /// + /// + /// The Sub-Assessment Key - Unique key for the sub-assessment type + /// + /// + /// The headers that will be added to request. + /// + /// + /// The cancellation token. + /// + /// + /// Thrown when the operation returned an invalid status code + /// + /// + /// Thrown when unable to deserialize the response + /// + /// + /// Thrown when a required parameter is null + /// + Task> GetWithHttpMessagesAsync(string scope, string assessmentName, string subAssessmentName, Dictionary> customHeaders = null, CancellationToken cancellationToken = default(CancellationToken)); + /// + /// Get security sub-assessments on all your scanned resources inside a + /// subscription scope + /// + /// + /// The NextLink from the previous successful call to List operation. + /// + /// + /// The headers that will be added to request. + /// + /// + /// The cancellation token. + /// + /// + /// Thrown when the operation returned an invalid status code + /// + /// + /// Thrown when unable to deserialize the response + /// + /// + /// Thrown when a required parameter is null + /// + Task>> ListAllNextWithHttpMessagesAsync(string nextPageLink, Dictionary> customHeaders = null, CancellationToken cancellationToken = default(CancellationToken)); + /// + /// Get security sub-assessments on all your scanned resources inside a + /// scope + /// + /// + /// The NextLink from the previous successful call to List operation. + /// + /// + /// The headers that will be added to request. + /// + /// + /// The cancellation token. + /// + /// + /// Thrown when the operation returned an invalid status code + /// + /// + /// Thrown when unable to deserialize the response + /// + /// + /// Thrown when a required parameter is null + /// + Task>> ListNextWithHttpMessagesAsync(string nextPageLink, Dictionary> customHeaders = null, CancellationToken cancellationToken = default(CancellationToken)); + } +} diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/JitNetworkAccessPoliciesOperations.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/JitNetworkAccessPoliciesOperations.cs index b45acb68db02..7b1095845e41 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/JitNetworkAccessPoliciesOperations.cs +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/JitNetworkAccessPoliciesOperations.cs @@ -1521,6 +1521,9 @@ internal JitNetworkAccessPoliciesOperations(SecurityCenterClient client) /// /// A list of virtual machines & ports to open access for /// + /// + /// The justification for making the initiate request + /// /// /// Headers that will be added to request. /// @@ -1542,7 +1545,7 @@ internal JitNetworkAccessPoliciesOperations(SecurityCenterClient client) /// /// A response object containing the response body and response headers. /// - public async Task> InitiateWithHttpMessagesAsync(string resourceGroupName, string jitNetworkAccessPolicyName, IList virtualMachines, Dictionary> customHeaders = null, CancellationToken cancellationToken = default(CancellationToken)) + public async Task> InitiateWithHttpMessagesAsync(string resourceGroupName, string jitNetworkAccessPolicyName, IList virtualMachines, string justification = default(string), Dictionary> customHeaders = null, CancellationToken cancellationToken = default(CancellationToken)) { if (Client.SubscriptionId == null) { @@ -1599,9 +1602,10 @@ internal JitNetworkAccessPoliciesOperations(SecurityCenterClient client) string jitNetworkAccessPolicyInitiateType = "initiate"; string apiVersion = "2015-06-01-preview"; JitNetworkAccessPolicyInitiateRequest body = new JitNetworkAccessPolicyInitiateRequest(); - if (virtualMachines != null) + if (virtualMachines != null || justification != null) { body.VirtualMachines = virtualMachines; + body.Justification = justification; } // Tracing bool _shouldTrace = ServiceClientTracing.IsEnabled; diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/JitNetworkAccessPoliciesOperationsExtensions.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/JitNetworkAccessPoliciesOperationsExtensions.cs index 388476ee545a..d38cf804bfe6 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/JitNetworkAccessPoliciesOperationsExtensions.cs +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/JitNetworkAccessPoliciesOperationsExtensions.cs @@ -302,9 +302,12 @@ public static void Delete(this IJitNetworkAccessPoliciesOperations operations, s /// /// A list of virtual machines & ports to open access for /// - public static JitNetworkAccessRequest Initiate(this IJitNetworkAccessPoliciesOperations operations, string resourceGroupName, string jitNetworkAccessPolicyName, IList virtualMachines) + /// + /// The justification for making the initiate request + /// + public static JitNetworkAccessRequest Initiate(this IJitNetworkAccessPoliciesOperations operations, string resourceGroupName, string jitNetworkAccessPolicyName, IList virtualMachines, string justification = default(string)) { - return operations.InitiateAsync(resourceGroupName, jitNetworkAccessPolicyName, virtualMachines).GetAwaiter().GetResult(); + return operations.InitiateAsync(resourceGroupName, jitNetworkAccessPolicyName, virtualMachines, justification).GetAwaiter().GetResult(); } /// @@ -323,12 +326,15 @@ public static JitNetworkAccessRequest Initiate(this IJitNetworkAccessPoliciesOpe /// /// A list of virtual machines & ports to open access for /// + /// + /// The justification for making the initiate request + /// /// /// The cancellation token. /// - public static async Task InitiateAsync(this IJitNetworkAccessPoliciesOperations operations, string resourceGroupName, string jitNetworkAccessPolicyName, IList virtualMachines, CancellationToken cancellationToken = default(CancellationToken)) + public static async Task InitiateAsync(this IJitNetworkAccessPoliciesOperations operations, string resourceGroupName, string jitNetworkAccessPolicyName, IList virtualMachines, string justification = default(string), CancellationToken cancellationToken = default(CancellationToken)) { - using (var _result = await operations.InitiateWithHttpMessagesAsync(resourceGroupName, jitNetworkAccessPolicyName, virtualMachines, null, cancellationToken).ConfigureAwait(false)) + using (var _result = await operations.InitiateWithHttpMessagesAsync(resourceGroupName, jitNetworkAccessPolicyName, virtualMachines, justification, null, cancellationToken).ConfigureAwait(false)) { return _result.Body; } diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/AdditionalData.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/AdditionalData.cs new file mode 100644 index 000000000000..a052f822516a --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/AdditionalData.cs @@ -0,0 +1,35 @@ +// +// Copyright (c) Microsoft Corporation. All rights reserved. +// Licensed under the MIT License. See License.txt in the project root for +// license information. +// +// Code generated by Microsoft (R) AutoRest Code Generator. +// Changes may cause incorrect behavior and will be lost if the code is +// regenerated. +// + +namespace Microsoft.Azure.Management.Security.Models +{ + using System.Linq; + + /// + /// Details of the sub-assessment + /// + public partial class AdditionalData + { + /// + /// Initializes a new instance of the AdditionalData class. + /// + public AdditionalData() + { + CustomInit(); + } + + + /// + /// An initialization method that performs custom operations like setting defaults + /// + partial void CustomInit(); + + } +} diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/AppWhitelistingGroup.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/AppWhitelistingGroup.cs index 8a42c7fa59bf..8bd1d03f8661 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/AppWhitelistingGroup.cs +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/AppWhitelistingGroup.cs @@ -37,7 +37,7 @@ public AppWhitelistingGroup() /// Location where the resource is /// stored /// Possible values include: 'Audit', - /// 'Enforce' + /// 'Enforce', 'None' /// Possible values include: /// 'Configured', 'NotConfigured', 'InProgress', 'Failed', /// 'NoStatus' @@ -46,13 +46,14 @@ public AppWhitelistingGroup() /// Possible values include: /// 'Azure_AppLocker', 'Azure_AuditD', 'NonAzure_AppLocker', /// 'NonAzure_AuditD', 'None' - public AppWhitelistingGroup(string id = default(string), string name = default(string), string type = default(string), string location = default(string), string enforcementMode = default(string), string configurationStatus = default(string), string recommendationStatus = default(string), IList issues = default(IList), string sourceSystem = default(string), IList vmRecommendations = default(IList), IList pathRecommendations = default(IList)) + public AppWhitelistingGroup(string id = default(string), string name = default(string), string type = default(string), string location = default(string), string enforcementMode = default(string), ProtectionMode protectionMode = default(ProtectionMode), string configurationStatus = default(string), string recommendationStatus = default(string), IList issues = default(IList), string sourceSystem = default(string), IList vmRecommendations = default(IList), IList pathRecommendations = default(IList)) { Id = id; Name = name; Type = type; Location = location; EnforcementMode = enforcementMode; + ProtectionMode = protectionMode; ConfigurationStatus = configurationStatus; RecommendationStatus = recommendationStatus; Issues = issues; @@ -92,11 +93,16 @@ public AppWhitelistingGroup() public string Location { get; private set; } /// - /// Gets or sets possible values include: 'Audit', 'Enforce' + /// Gets or sets possible values include: 'Audit', 'Enforce', 'None' /// [JsonProperty(PropertyName = "properties.enforcementMode")] public string EnforcementMode { get; set; } + /// + /// + [JsonProperty(PropertyName = "properties.protectionMode")] + public ProtectionMode ProtectionMode { get; set; } + /// /// Gets or sets possible values include: 'Configured', /// 'NotConfigured', 'InProgress', 'Failed', 'NoStatus' diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/AppWhitelistingPutGroupData.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/AppWhitelistingPutGroupData.cs index 996ed88c504f..bd1f357bfb40 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/AppWhitelistingPutGroupData.cs +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/AppWhitelistingPutGroupData.cs @@ -33,11 +33,16 @@ public AppWhitelistingPutGroupData() /// Initializes a new instance of the AppWhitelistingPutGroupData /// class. /// - /// Possible values include: 'Audit', - /// 'Enforce' - public AppWhitelistingPutGroupData(string enforcementMode = default(string), IList vmRecommendations = default(IList), IList pathRecommendations = default(IList)) + /// The enforcement mode of the group. + /// Can also be defined per collection type by using ProtectionMode. + /// Possible values include: 'Audit', 'Enforce', 'None' + /// The protection mode of the group per + /// collection type. Can also be defined for all collection types by + /// using EnforcementMode + public AppWhitelistingPutGroupData(string enforcementMode = default(string), ProtectionMode protectionMode = default(ProtectionMode), IList vmRecommendations = default(IList), IList pathRecommendations = default(IList)) { EnforcementMode = enforcementMode; + ProtectionMode = protectionMode; VmRecommendations = vmRecommendations; PathRecommendations = pathRecommendations; CustomInit(); @@ -49,11 +54,21 @@ public AppWhitelistingPutGroupData() partial void CustomInit(); /// - /// Gets or sets possible values include: 'Audit', 'Enforce' + /// Gets or sets the enforcement mode of the group. Can also be defined + /// per collection type by using ProtectionMode. Possible values + /// include: 'Audit', 'Enforce', 'None' /// [JsonProperty(PropertyName = "enforcementMode")] public string EnforcementMode { get; set; } + /// + /// Gets or sets the protection mode of the group per collection type. + /// Can also be defined for all collection types by using + /// EnforcementMode + /// + [JsonProperty(PropertyName = "protectionMode")] + public ProtectionMode ProtectionMode { get; set; } + /// /// [JsonProperty(PropertyName = "vmRecommendations")] diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/AwsResourceDetails.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/AwsResourceDetails.cs new file mode 100644 index 000000000000..3285c97732f8 --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/AwsResourceDetails.cs @@ -0,0 +1,61 @@ +// +// Copyright (c) Microsoft Corporation. All rights reserved. +// Licensed under the MIT License. See License.txt in the project root for +// license information. +// +// Code generated by Microsoft (R) AutoRest Code Generator. +// Changes may cause incorrect behavior and will be lost if the code is +// regenerated. +// + +namespace Microsoft.Azure.Management.Security.Models +{ + using Newtonsoft.Json; + using System.Linq; + + /// + /// Details of the resource that was assessed + /// + [Newtonsoft.Json.JsonObject("Aws")] + public partial class AwsResourceDetails : ResourceDetails + { + /// + /// Initializes a new instance of the AwsResourceDetails class. + /// + public AwsResourceDetails() + { + CustomInit(); + } + + /// + /// Initializes a new instance of the AwsResourceDetails class. + /// + /// AWS account ID + /// AWS resource ID. can be ARN or + /// other + public AwsResourceDetails(string accountId = default(string), string awsResourceId = default(string)) + { + AccountId = accountId; + AwsResourceId = awsResourceId; + CustomInit(); + } + + /// + /// An initialization method that performs custom operations like setting defaults + /// + partial void CustomInit(); + + /// + /// Gets AWS account ID + /// + [JsonProperty(PropertyName = "accountId")] + public string AccountId { get; private set; } + + /// + /// Gets AWS resource ID. can be ARN or other + /// + [JsonProperty(PropertyName = "awsResourceId")] + public string AwsResourceId { get; private set; } + + } +} diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/AzureResourceDetails.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/AzureResourceDetails.cs new file mode 100644 index 000000000000..eaacf344b6b1 --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/AzureResourceDetails.cs @@ -0,0 +1,52 @@ +// +// Copyright (c) Microsoft Corporation. All rights reserved. +// Licensed under the MIT License. See License.txt in the project root for +// license information. +// +// Code generated by Microsoft (R) AutoRest Code Generator. +// Changes may cause incorrect behavior and will be lost if the code is +// regenerated. +// + +namespace Microsoft.Azure.Management.Security.Models +{ + using Newtonsoft.Json; + using System.Linq; + + /// + /// Details of the resource that was assessed + /// + [Newtonsoft.Json.JsonObject("Azure")] + public partial class AzureResourceDetails : ResourceDetails + { + /// + /// Initializes a new instance of the AzureResourceDetails class. + /// + public AzureResourceDetails() + { + CustomInit(); + } + + /// + /// Initializes a new instance of the AzureResourceDetails class. + /// + /// Azure resource ID of the assessed resource + public AzureResourceDetails(string id = default(string)) + { + Id = id; + CustomInit(); + } + + /// + /// An initialization method that performs custom operations like setting defaults + /// + partial void CustomInit(); + + /// + /// Gets azure resource ID of the assessed resource + /// + [JsonProperty(PropertyName = "id")] + public string Id { get; private set; } + + } +} diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/CVE.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/CVE.cs new file mode 100644 index 000000000000..c517739c77c2 --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/CVE.cs @@ -0,0 +1,59 @@ +// +// Copyright (c) Microsoft Corporation. All rights reserved. +// Licensed under the MIT License. See License.txt in the project root for +// license information. +// +// Code generated by Microsoft (R) AutoRest Code Generator. +// Changes may cause incorrect behavior and will be lost if the code is +// regenerated. +// + +namespace Microsoft.Azure.Management.Security.Models +{ + using Newtonsoft.Json; + using System.Linq; + + /// + /// CVE details + /// + public partial class CVE + { + /// + /// Initializes a new instance of the CVE class. + /// + public CVE() + { + CustomInit(); + } + + /// + /// Initializes a new instance of the CVE class. + /// + /// CVE title + /// Link url + public CVE(string title = default(string), string link = default(string)) + { + Title = title; + Link = link; + CustomInit(); + } + + /// + /// An initialization method that performs custom operations like setting defaults + /// + partial void CustomInit(); + + /// + /// Gets CVE title + /// + [JsonProperty(PropertyName = "title")] + public string Title { get; private set; } + + /// + /// Gets link url + /// + [JsonProperty(PropertyName = "link")] + public string Link { get; private set; } + + } +} diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/CVSS.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/CVSS.cs new file mode 100644 index 000000000000..9f419f3ffaee --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/CVSS.cs @@ -0,0 +1,51 @@ +// +// Copyright (c) Microsoft Corporation. All rights reserved. +// Licensed under the MIT License. See License.txt in the project root for +// license information. +// +// Code generated by Microsoft (R) AutoRest Code Generator. +// Changes may cause incorrect behavior and will be lost if the code is +// regenerated. +// + +namespace Microsoft.Azure.Management.Security.Models +{ + using Newtonsoft.Json; + using System.Linq; + + /// + /// CVSS details + /// + public partial class CVSS + { + /// + /// Initializes a new instance of the CVSS class. + /// + public CVSS() + { + CustomInit(); + } + + /// + /// Initializes a new instance of the CVSS class. + /// + /// CVSS base + public CVSS(double? baseProperty = default(double?)) + { + BaseProperty = baseProperty; + CustomInit(); + } + + /// + /// An initialization method that performs custom operations like setting defaults + /// + partial void CustomInit(); + + /// + /// Gets CVSS base + /// + [JsonProperty(PropertyName = "base")] + public double? BaseProperty { get; private set; } + + } +} diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/ContainerRegistryVulnerabilityProperties.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/ContainerRegistryVulnerabilityProperties.cs new file mode 100644 index 000000000000..5938f602483a --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/ContainerRegistryVulnerabilityProperties.cs @@ -0,0 +1,117 @@ +// +// Copyright (c) Microsoft Corporation. All rights reserved. +// Licensed under the MIT License. See License.txt in the project root for +// license information. +// +// Code generated by Microsoft (R) AutoRest Code Generator. +// Changes may cause incorrect behavior and will be lost if the code is +// regenerated. +// + +namespace Microsoft.Azure.Management.Security.Models +{ + using Newtonsoft.Json; + using System.Collections; + using System.Collections.Generic; + using System.Linq; + + /// + /// Additional context fields for container registry Vulnerability + /// assessment + /// + [Newtonsoft.Json.JsonObject("ContainerRegistryVulnerability")] + public partial class ContainerRegistryVulnerabilityProperties : AdditionalData + { + /// + /// Initializes a new instance of the + /// ContainerRegistryVulnerabilityProperties class. + /// + public ContainerRegistryVulnerabilityProperties() + { + CustomInit(); + } + + /// + /// Initializes a new instance of the + /// ContainerRegistryVulnerabilityProperties class. + /// + /// Vulnerability Type. e.g: Vulnerability, + /// Potential Vulnerability, Information Gathered, + /// Vulnerability + /// Dictionary from cvss version to cvss details + /// object + /// Indicates whether a patch is available or + /// not + /// List of CVEs + /// Published time + /// Name of the repository which the + /// vulnerable image belongs to + /// Digest of the vulnerable image + public ContainerRegistryVulnerabilityProperties(string type = default(string), IDictionary cvss = default(IDictionary), bool? patchable = default(bool?), IList cve = default(IList), System.DateTime? publishedTime = default(System.DateTime?), IList vendorReferences = default(IList), string repositoryName = default(string), string imageDigest = default(string)) + { + Type = type; + Cvss = cvss; + Patchable = patchable; + Cve = cve; + PublishedTime = publishedTime; + VendorReferences = vendorReferences; + RepositoryName = repositoryName; + ImageDigest = imageDigest; + CustomInit(); + } + + /// + /// An initialization method that performs custom operations like setting defaults + /// + partial void CustomInit(); + + /// + /// Gets vulnerability Type. e.g: Vulnerability, Potential + /// Vulnerability, Information Gathered, Vulnerability + /// + [JsonProperty(PropertyName = "type")] + public string Type { get; private set; } + + /// + /// Gets dictionary from cvss version to cvss details object + /// + [JsonProperty(PropertyName = "cvss")] + public IDictionary Cvss { get; private set; } + + /// + /// Gets indicates whether a patch is available or not + /// + [JsonProperty(PropertyName = "patchable")] + public bool? Patchable { get; private set; } + + /// + /// Gets list of CVEs + /// + [JsonProperty(PropertyName = "cve")] + public IList Cve { get; private set; } + + /// + /// Gets published time + /// + [JsonProperty(PropertyName = "publishedTime")] + public System.DateTime? PublishedTime { get; private set; } + + /// + /// + [JsonProperty(PropertyName = "vendorReferences")] + public IList VendorReferences { get; private set; } + + /// + /// Gets name of the repository which the vulnerable image belongs to + /// + [JsonProperty(PropertyName = "repositoryName")] + public string RepositoryName { get; private set; } + + /// + /// Gets digest of the vulnerable image + /// + [JsonProperty(PropertyName = "imageDigest")] + public string ImageDigest { get; private set; } + + } +} diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/IoTSecurityAggregatedAlert.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/IoTSecurityAggregatedAlert.cs index 4937b658ffcf..576c441f6737 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/IoTSecurityAggregatedAlert.cs +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/IoTSecurityAggregatedAlert.cs @@ -60,7 +60,9 @@ public IoTSecurityAggregatedAlert() /// response. /// Log analytics query for getting the /// list of affected devices/alerts. - public IoTSecurityAggregatedAlert(string id = default(string), string name = default(string), string type = default(string), IDictionary tags = default(IDictionary), string alertType = default(string), string alertDisplayName = default(string), System.DateTime? aggregatedDateUtc = default(System.DateTime?), string vendorName = default(string), string reportedSeverity = default(string), string remediationSteps = default(string), string description = default(string), int? count = default(int?), string effectedResourceType = default(string), string systemSource = default(string), string actionTaken = default(string), string logAnalyticsQuery = default(string)) + /// 10 devices with the highest number of + /// occurrences of this alert type, on this day. + public IoTSecurityAggregatedAlert(string id = default(string), string name = default(string), string type = default(string), IDictionary tags = default(IDictionary), string alertType = default(string), string alertDisplayName = default(string), System.DateTime? aggregatedDateUtc = default(System.DateTime?), string vendorName = default(string), string reportedSeverity = default(string), string remediationSteps = default(string), string description = default(string), int? count = default(int?), string effectedResourceType = default(string), string systemSource = default(string), string actionTaken = default(string), string logAnalyticsQuery = default(string), IList topDevicesList = default(IList)) { Id = id; Name = name; @@ -78,6 +80,7 @@ public IoTSecurityAggregatedAlert() SystemSource = systemSource; ActionTaken = actionTaken; LogAnalyticsQuery = logAnalyticsQuery; + TopDevicesList = topDevicesList; CustomInit(); } @@ -186,5 +189,12 @@ public IoTSecurityAggregatedAlert() [JsonProperty(PropertyName = "properties.logAnalyticsQuery")] public string LogAnalyticsQuery { get; private set; } + /// + /// Gets 10 devices with the highest number of occurrences of this + /// alert type, on this day. + /// + [JsonProperty(PropertyName = "properties.topDevicesList")] + public IList TopDevicesList { get; private set; } + } } diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/IoTSecurityAggregatedAlertPropertiesTopDevicesListItem.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/IoTSecurityAggregatedAlertPropertiesTopDevicesListItem.cs new file mode 100644 index 000000000000..fe7313395686 --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/IoTSecurityAggregatedAlertPropertiesTopDevicesListItem.cs @@ -0,0 +1,69 @@ +// +// Copyright (c) Microsoft Corporation. All rights reserved. +// Licensed under the MIT License. See License.txt in the project root for +// license information. +// +// Code generated by Microsoft (R) AutoRest Code Generator. +// Changes may cause incorrect behavior and will be lost if the code is +// regenerated. +// + +namespace Microsoft.Azure.Management.Security.Models +{ + using Newtonsoft.Json; + using System.Linq; + + public partial class IoTSecurityAggregatedAlertPropertiesTopDevicesListItem + { + /// + /// Initializes a new instance of the + /// IoTSecurityAggregatedAlertPropertiesTopDevicesListItem class. + /// + public IoTSecurityAggregatedAlertPropertiesTopDevicesListItem() + { + CustomInit(); + } + + /// + /// Initializes a new instance of the + /// IoTSecurityAggregatedAlertPropertiesTopDevicesListItem class. + /// + /// Name of the device. + /// Number of alerts raised for this + /// device. + /// Most recent time this alert was raised + /// for this device, on this day. + public IoTSecurityAggregatedAlertPropertiesTopDevicesListItem(string deviceId = default(string), int? alertsCount = default(int?), string lastOccurrence = default(string)) + { + DeviceId = deviceId; + AlertsCount = alertsCount; + LastOccurrence = lastOccurrence; + CustomInit(); + } + + /// + /// An initialization method that performs custom operations like setting defaults + /// + partial void CustomInit(); + + /// + /// Gets name of the device. + /// + [JsonProperty(PropertyName = "deviceId")] + public string DeviceId { get; private set; } + + /// + /// Gets number of alerts raised for this device. + /// + [JsonProperty(PropertyName = "alertsCount")] + public int? AlertsCount { get; private set; } + + /// + /// Gets most recent time this alert was raised for this device, on + /// this day. + /// + [JsonProperty(PropertyName = "lastOccurrence")] + public string LastOccurrence { get; private set; } + + } +} diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/IoTSecuritySolutionModel.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/IoTSecuritySolutionModel.cs index e13dbb4122b8..7a86a5e9c637 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/IoTSecuritySolutionModel.cs +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/IoTSecuritySolutionModel.cs @@ -51,7 +51,9 @@ public IoTSecuritySolutionModel() /// List of resources that were /// automatically discovered as relevant to the security /// solution. - public IoTSecuritySolutionModel(string workspace, string displayName, IList iotHubs, string id = default(string), string name = default(string), string type = default(string), IDictionary tags = default(IDictionary), string location = default(string), string status = default(string), IList export = default(IList), IList disabledDataSources = default(IList), UserDefinedResourcesProperties userDefinedResources = default(UserDefinedResourcesProperties), IList autoDiscoveredResources = default(IList), IList recommendationsConfiguration = default(IList)) + /// Unmasked IP address logging + /// status. Possible values include: 'Disabled', 'Enabled' + public IoTSecuritySolutionModel(string workspace, string displayName, IList iotHubs, string id = default(string), string name = default(string), string type = default(string), IDictionary tags = default(IDictionary), string location = default(string), string status = default(string), IList export = default(IList), IList disabledDataSources = default(IList), UserDefinedResourcesProperties userDefinedResources = default(UserDefinedResourcesProperties), IList autoDiscoveredResources = default(IList), IList recommendationsConfiguration = default(IList), string unmaskedIpLoggingStatus = default(string)) { Id = id; Name = name; @@ -67,6 +69,7 @@ public IoTSecuritySolutionModel() UserDefinedResources = userDefinedResources; AutoDiscoveredResources = autoDiscoveredResources; RecommendationsConfiguration = recommendationsConfiguration; + UnmaskedIpLoggingStatus = unmaskedIpLoggingStatus; CustomInit(); } @@ -161,6 +164,13 @@ public IoTSecuritySolutionModel() [JsonProperty(PropertyName = "properties.recommendationsConfiguration")] public IList RecommendationsConfiguration { get; set; } + /// + /// Gets or sets unmasked IP address logging status. Possible values + /// include: 'Disabled', 'Enabled' + /// + [JsonProperty(PropertyName = "properties.unmaskedIpLoggingStatus")] + public string UnmaskedIpLoggingStatus { get; set; } + /// /// Validate the object. /// diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/JitNetworkAccessPolicyInitiateRequest.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/JitNetworkAccessPolicyInitiateRequest.cs index a17751c48a05..a200477d08ac 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/JitNetworkAccessPolicyInitiateRequest.cs +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/JitNetworkAccessPolicyInitiateRequest.cs @@ -33,9 +33,12 @@ public JitNetworkAccessPolicyInitiateRequest() /// /// A list of virtual machines & /// ports to open access for - public JitNetworkAccessPolicyInitiateRequest(IList virtualMachines) + /// The justification for making the + /// initiate request + public JitNetworkAccessPolicyInitiateRequest(IList virtualMachines, string justification = default(string)) { VirtualMachines = virtualMachines; + Justification = justification; CustomInit(); } @@ -51,6 +54,12 @@ public JitNetworkAccessPolicyInitiateRequest(IList VirtualMachines { get; set; } + /// + /// Gets or sets the justification for making the initiate request + /// + [JsonProperty(PropertyName = "justification")] + public string Justification { get; set; } + /// /// Validate the object. /// diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/JitNetworkAccessRequest.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/JitNetworkAccessRequest.cs index a613853e3aba..e0c69789405e 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/JitNetworkAccessRequest.cs +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/JitNetworkAccessRequest.cs @@ -33,11 +33,14 @@ public JitNetworkAccessRequest() /// UTC /// The identity of the person who made the /// request - public JitNetworkAccessRequest(IList virtualMachines, System.DateTime startTimeUtc, string requestor) + /// The justification for making the + /// initiate request + public JitNetworkAccessRequest(IList virtualMachines, System.DateTime startTimeUtc, string requestor, string justification = default(string)) { VirtualMachines = virtualMachines; StartTimeUtc = startTimeUtc; Requestor = requestor; + Justification = justification; CustomInit(); } @@ -63,6 +66,12 @@ public JitNetworkAccessRequest(IList virt [JsonProperty(PropertyName = "requestor")] public string Requestor { get; set; } + /// + /// Gets or sets the justification for making the initiate request + /// + [JsonProperty(PropertyName = "justification")] + public string Justification { get; set; } + /// /// Validate the object. /// diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/ProtectionMode.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/ProtectionMode.cs new file mode 100644 index 000000000000..620558e29e99 --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/ProtectionMode.cs @@ -0,0 +1,80 @@ +// +// Copyright (c) Microsoft Corporation. All rights reserved. +// Licensed under the MIT License. See License.txt in the project root for +// license information. +// +// Code generated by Microsoft (R) AutoRest Code Generator. +// Changes may cause incorrect behavior and will be lost if the code is +// regenerated. +// + +namespace Microsoft.Azure.Management.Security.Models +{ + using Newtonsoft.Json; + using System.Linq; + + /// + /// The protection mode of the collection/file types. Exe/Msi/Script are + /// used for Windows, Executable is used for Linux. + /// + public partial class ProtectionMode + { + /// + /// Initializes a new instance of the ProtectionMode class. + /// + public ProtectionMode() + { + CustomInit(); + } + + /// + /// Initializes a new instance of the ProtectionMode class. + /// + /// Possible values include: 'Audit', 'Enforce', + /// 'None' + /// Possible values include: 'Audit', 'Enforce', + /// 'None' + /// Possible values include: 'Audit', 'Enforce', + /// 'None' + /// Possible values include: 'Audit', + /// 'Enforce', 'None' + public ProtectionMode(string exe = default(string), string msi = default(string), string script = default(string), string executable = default(string)) + { + Exe = exe; + Msi = msi; + Script = script; + Executable = executable; + CustomInit(); + } + + /// + /// An initialization method that performs custom operations like setting defaults + /// + partial void CustomInit(); + + /// + /// Gets or sets possible values include: 'Audit', 'Enforce', 'None' + /// + [JsonProperty(PropertyName = "exe")] + public string Exe { get; set; } + + /// + /// Gets or sets possible values include: 'Audit', 'Enforce', 'None' + /// + [JsonProperty(PropertyName = "msi")] + public string Msi { get; set; } + + /// + /// Gets or sets possible values include: 'Audit', 'Enforce', 'None' + /// + [JsonProperty(PropertyName = "script")] + public string Script { get; set; } + + /// + /// Gets or sets possible values include: 'Audit', 'Enforce', 'None' + /// + [JsonProperty(PropertyName = "executable")] + public string Executable { get; set; } + + } +} diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/ResourceDetails.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/ResourceDetails.cs new file mode 100644 index 000000000000..14c1aa733667 --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/ResourceDetails.cs @@ -0,0 +1,35 @@ +// +// Copyright (c) Microsoft Corporation. All rights reserved. +// Licensed under the MIT License. See License.txt in the project root for +// license information. +// +// Code generated by Microsoft (R) AutoRest Code Generator. +// Changes may cause incorrect behavior and will be lost if the code is +// regenerated. +// + +namespace Microsoft.Azure.Management.Security.Models +{ + using System.Linq; + + /// + /// Details of the resource that was assessed + /// + public partial class ResourceDetails + { + /// + /// Initializes a new instance of the ResourceDetails class. + /// + public ResourceDetails() + { + CustomInit(); + } + + + /// + /// An initialization method that performs custom operations like setting defaults + /// + partial void CustomInit(); + + } +} diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/SecuritySubAssessment.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/SecuritySubAssessment.cs new file mode 100644 index 000000000000..36c19a3ee77c --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/SecuritySubAssessment.cs @@ -0,0 +1,129 @@ +// +// Copyright (c) Microsoft Corporation. All rights reserved. +// Licensed under the MIT License. See License.txt in the project root for +// license information. +// +// Code generated by Microsoft (R) AutoRest Code Generator. +// Changes may cause incorrect behavior and will be lost if the code is +// regenerated. +// + +namespace Microsoft.Azure.Management.Security.Models +{ + using Microsoft.Rest; + using Microsoft.Rest.Serialization; + using Newtonsoft.Json; + using System.Linq; + + /// + /// Security sub-assessment on a resource + /// + [Rest.Serialization.JsonTransformation] + public partial class SecuritySubAssessment : Resource + { + /// + /// Initializes a new instance of the SecuritySubAssessment class. + /// + public SecuritySubAssessment() + { + CustomInit(); + } + + /// + /// Initializes a new instance of the SecuritySubAssessment class. + /// + /// Resource Id + /// Resource name + /// Resource type + /// Vulnerability ID + /// User friendly display name of the + /// sub-assessment + /// Information on how to remediate this + /// sub-assessment + /// Description of the impact of this + /// sub-assessment + /// Category of the sub-assessment + /// Human readable description of the + /// assessment status + /// The date and time the sub-assessment + /// was generated + public SecuritySubAssessment(string id = default(string), string name = default(string), string type = default(string), string securitySubAssessmentId = default(string), string displayName = default(string), SubAssessmentStatus status = default(SubAssessmentStatus), string remediation = default(string), string impact = default(string), string category = default(string), string description = default(string), System.DateTime? timeGenerated = default(System.DateTime?), ResourceDetails resourceDetails = default(ResourceDetails), AdditionalData additionalData = default(AdditionalData)) + : base(id, name, type) + { + SecuritySubAssessmentId = securitySubAssessmentId; + DisplayName = displayName; + Status = status; + Remediation = remediation; + Impact = impact; + Category = category; + Description = description; + TimeGenerated = timeGenerated; + ResourceDetails = resourceDetails; + AdditionalData = additionalData; + CustomInit(); + } + + /// + /// An initialization method that performs custom operations like setting defaults + /// + partial void CustomInit(); + + /// + /// Gets vulnerability ID + /// + [JsonProperty(PropertyName = "properties.id")] + public string SecuritySubAssessmentId { get; private set; } + + /// + /// Gets user friendly display name of the sub-assessment + /// + [JsonProperty(PropertyName = "properties.displayName")] + public string DisplayName { get; private set; } + + /// + /// + [JsonProperty(PropertyName = "properties.status")] + public SubAssessmentStatus Status { get; set; } + + /// + /// Gets information on how to remediate this sub-assessment + /// + [JsonProperty(PropertyName = "properties.remediation")] + public string Remediation { get; private set; } + + /// + /// Gets description of the impact of this sub-assessment + /// + [JsonProperty(PropertyName = "properties.impact")] + public string Impact { get; private set; } + + /// + /// Gets category of the sub-assessment + /// + [JsonProperty(PropertyName = "properties.category")] + public string Category { get; private set; } + + /// + /// Gets human readable description of the assessment status + /// + [JsonProperty(PropertyName = "properties.description")] + public string Description { get; private set; } + + /// + /// Gets the date and time the sub-assessment was generated + /// + [JsonProperty(PropertyName = "properties.timeGenerated")] + public System.DateTime? TimeGenerated { get; private set; } + + /// + /// + [JsonProperty(PropertyName = "properties.resourceDetails")] + public ResourceDetails ResourceDetails { get; set; } + + /// + /// + [JsonProperty(PropertyName = "properties.additionalData")] + public AdditionalData AdditionalData { get; set; } + + } +} diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/ServerVulnerabilityProperties.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/ServerVulnerabilityProperties.cs new file mode 100644 index 000000000000..bbfe28e93d43 --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/ServerVulnerabilityProperties.cs @@ -0,0 +1,106 @@ +// +// Copyright (c) Microsoft Corporation. All rights reserved. +// Licensed under the MIT License. See License.txt in the project root for +// license information. +// +// Code generated by Microsoft (R) AutoRest Code Generator. +// Changes may cause incorrect behavior and will be lost if the code is +// regenerated. +// + +namespace Microsoft.Azure.Management.Security.Models +{ + using Newtonsoft.Json; + using System.Collections; + using System.Collections.Generic; + using System.Linq; + + /// + /// Additional context fields for server vulnerability assessment + /// + [Newtonsoft.Json.JsonObject("ServerVulnerabilityAssessment")] + public partial class ServerVulnerabilityProperties : AdditionalData + { + /// + /// Initializes a new instance of the ServerVulnerabilityProperties + /// class. + /// + public ServerVulnerabilityProperties() + { + CustomInit(); + } + + /// + /// Initializes a new instance of the ServerVulnerabilityProperties + /// class. + /// + /// Vulnerability Type. e.g: Vulnerability, + /// Potential Vulnerability, Information Gathered + /// Dictionary from cvss version to cvss details + /// object + /// Indicates whether a patch is available or + /// not + /// List of CVEs + /// Threat name + /// Published time + public ServerVulnerabilityProperties(string type = default(string), IDictionary cvss = default(IDictionary), bool? patchable = default(bool?), IList cve = default(IList), string threat = default(string), System.DateTime? publishedTime = default(System.DateTime?), IList vendorReferences = default(IList)) + { + Type = type; + Cvss = cvss; + Patchable = patchable; + Cve = cve; + Threat = threat; + PublishedTime = publishedTime; + VendorReferences = vendorReferences; + CustomInit(); + } + + /// + /// An initialization method that performs custom operations like setting defaults + /// + partial void CustomInit(); + + /// + /// Gets vulnerability Type. e.g: Vulnerability, Potential + /// Vulnerability, Information Gathered + /// + [JsonProperty(PropertyName = "type")] + public string Type { get; private set; } + + /// + /// Gets dictionary from cvss version to cvss details object + /// + [JsonProperty(PropertyName = "cvss")] + public IDictionary Cvss { get; private set; } + + /// + /// Gets indicates whether a patch is available or not + /// + [JsonProperty(PropertyName = "patchable")] + public bool? Patchable { get; private set; } + + /// + /// Gets list of CVEs + /// + [JsonProperty(PropertyName = "cve")] + public IList Cve { get; private set; } + + /// + /// Gets threat name + /// + [JsonProperty(PropertyName = "threat")] + public string Threat { get; private set; } + + /// + /// Gets published time + /// + [JsonProperty(PropertyName = "publishedTime")] + public System.DateTime? PublishedTime { get; private set; } + + /// + /// + [JsonProperty(PropertyName = "vendorReferences")] + public IList VendorReferences { get; private set; } + + } +} diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/Severity.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/Severity.cs new file mode 100644 index 000000000000..d8fe3d2429fd --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/Severity.cs @@ -0,0 +1,23 @@ +// +// Copyright (c) Microsoft Corporation. All rights reserved. +// Licensed under the MIT License. See License.txt in the project root for +// license information. +// +// Code generated by Microsoft (R) AutoRest Code Generator. +// Changes may cause incorrect behavior and will be lost if the code is +// regenerated. +// + +namespace Microsoft.Azure.Management.Security.Models +{ + + /// + /// Defines values for Severity. + /// + public static class Severity + { + public const string Low = "Low"; + public const string Medium = "Medium"; + public const string High = "High"; + } +} diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/SqlServerVulnerabilityProperties.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/SqlServerVulnerabilityProperties.cs new file mode 100644 index 000000000000..f4e6a8943968 --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/SqlServerVulnerabilityProperties.cs @@ -0,0 +1,66 @@ +// +// Copyright (c) Microsoft Corporation. All rights reserved. +// Licensed under the MIT License. See License.txt in the project root for +// license information. +// +// Code generated by Microsoft (R) AutoRest Code Generator. +// Changes may cause incorrect behavior and will be lost if the code is +// regenerated. +// + +namespace Microsoft.Azure.Management.Security.Models +{ + using Newtonsoft.Json; + using System.Linq; + + /// + /// Details of the resource that was assessed + /// + [Newtonsoft.Json.JsonObject("SqlServerVulnerability")] + public partial class SqlServerVulnerabilityProperties : AdditionalData + { + /// + /// Initializes a new instance of the SqlServerVulnerabilityProperties + /// class. + /// + public SqlServerVulnerabilityProperties() + { + CustomInit(); + } + + /// + /// Initializes a new instance of the SqlServerVulnerabilityProperties + /// class. + /// + /// The resource type the sub assessment refers to + /// in its resource details + /// The T-SQL query that runs on your SQL database + /// to perform the particular check + public SqlServerVulnerabilityProperties(string type = default(string), string query = default(string)) + { + Type = type; + Query = query; + CustomInit(); + } + + /// + /// An initialization method that performs custom operations like setting defaults + /// + partial void CustomInit(); + + /// + /// Gets the resource type the sub assessment refers to in its resource + /// details + /// + [JsonProperty(PropertyName = "type")] + public string Type { get; private set; } + + /// + /// Gets the T-SQL query that runs on your SQL database to perform the + /// particular check + /// + [JsonProperty(PropertyName = "query")] + public string Query { get; private set; } + + } +} diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/SubAssessmentStatus.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/SubAssessmentStatus.cs new file mode 100644 index 000000000000..6135ab7b906f --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/SubAssessmentStatus.cs @@ -0,0 +1,82 @@ +// +// Copyright (c) Microsoft Corporation. All rights reserved. +// Licensed under the MIT License. See License.txt in the project root for +// license information. +// +// Code generated by Microsoft (R) AutoRest Code Generator. +// Changes may cause incorrect behavior and will be lost if the code is +// regenerated. +// + +namespace Microsoft.Azure.Management.Security.Models +{ + using Newtonsoft.Json; + using System.Linq; + + /// + /// Status of the sub-assessment + /// + public partial class SubAssessmentStatus + { + /// + /// Initializes a new instance of the SubAssessmentStatus class. + /// + public SubAssessmentStatus() + { + CustomInit(); + } + + /// + /// Initializes a new instance of the SubAssessmentStatus class. + /// + /// Programmatic code for the status of the + /// assessment. Possible values include: 'Healthy', 'Unhealthy', + /// 'NotApplicable' + /// Programmatic code for the cause of the + /// assessment status + /// Human readable description of the + /// assessment status + /// The sub-assessment severity level. Possible + /// values include: 'Low', 'Medium', 'High' + public SubAssessmentStatus(string code = default(string), string cause = default(string), string description = default(string), string severity = default(string)) + { + Code = code; + Cause = cause; + Description = description; + Severity = severity; + CustomInit(); + } + + /// + /// An initialization method that performs custom operations like setting defaults + /// + partial void CustomInit(); + + /// + /// Gets programmatic code for the status of the assessment. Possible + /// values include: 'Healthy', 'Unhealthy', 'NotApplicable' + /// + [JsonProperty(PropertyName = "code")] + public string Code { get; private set; } + + /// + /// Gets programmatic code for the cause of the assessment status + /// + [JsonProperty(PropertyName = "cause")] + public string Cause { get; private set; } + + /// + /// Gets human readable description of the assessment status + /// + [JsonProperty(PropertyName = "description")] + public string Description { get; private set; } + + /// + /// Gets the sub-assessment severity level. Possible values include: + /// 'Low', 'Medium', 'High' + /// + [JsonProperty(PropertyName = "severity")] + public string Severity { get; private set; } + + } +} diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/SubAssessmentStatusCode.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/SubAssessmentStatusCode.cs new file mode 100644 index 000000000000..29a2701497c4 --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/SubAssessmentStatusCode.cs @@ -0,0 +1,32 @@ +// +// Copyright (c) Microsoft Corporation. All rights reserved. +// Licensed under the MIT License. See License.txt in the project root for +// license information. +// +// Code generated by Microsoft (R) AutoRest Code Generator. +// Changes may cause incorrect behavior and will be lost if the code is +// regenerated. +// + +namespace Microsoft.Azure.Management.Security.Models +{ + + /// + /// Defines values for SubAssessmentStatusCode. + /// + public static class SubAssessmentStatusCode + { + /// + /// The resource is healthy + /// + public const string Healthy = "Healthy"; + /// + /// The resource has a security issue that needs to be addressed + /// + public const string Unhealthy = "Unhealthy"; + /// + /// Assessment for this resource did not happen + /// + public const string NotApplicable = "NotApplicable"; + } +} diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/UnmaskedIpLoggingStatus.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/UnmaskedIpLoggingStatus.cs new file mode 100644 index 000000000000..3e10ac3c9d4a --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/UnmaskedIpLoggingStatus.cs @@ -0,0 +1,28 @@ +// +// Copyright (c) Microsoft Corporation. All rights reserved. +// Licensed under the MIT License. See License.txt in the project root for +// license information. +// +// Code generated by Microsoft (R) AutoRest Code Generator. +// Changes may cause incorrect behavior and will be lost if the code is +// regenerated. +// + +namespace Microsoft.Azure.Management.Security.Models +{ + + /// + /// Defines values for UnmaskedIpLoggingStatus. + /// + public static class UnmaskedIpLoggingStatus + { + /// + /// Unmasked IP logging is disabled + /// + public const string Disabled = "Disabled"; + /// + /// Unmasked IP logging is enabled + /// + public const string Enabled = "Enabled"; + } +} diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/VendorReference.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/VendorReference.cs new file mode 100644 index 000000000000..09c28c8f0fe7 --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/Models/VendorReference.cs @@ -0,0 +1,59 @@ +// +// Copyright (c) Microsoft Corporation. All rights reserved. +// Licensed under the MIT License. See License.txt in the project root for +// license information. +// +// Code generated by Microsoft (R) AutoRest Code Generator. +// Changes may cause incorrect behavior and will be lost if the code is +// regenerated. +// + +namespace Microsoft.Azure.Management.Security.Models +{ + using Newtonsoft.Json; + using System.Linq; + + /// + /// Vendor reference + /// + public partial class VendorReference + { + /// + /// Initializes a new instance of the VendorReference class. + /// + public VendorReference() + { + CustomInit(); + } + + /// + /// Initializes a new instance of the VendorReference class. + /// + /// Link title + /// Link url + public VendorReference(string title = default(string), string link = default(string)) + { + Title = title; + Link = link; + CustomInit(); + } + + /// + /// An initialization method that performs custom operations like setting defaults + /// + partial void CustomInit(); + + /// + /// Gets link title + /// + [JsonProperty(PropertyName = "title")] + public string Title { get; private set; } + + /// + /// Gets link url + /// + [JsonProperty(PropertyName = "link")] + public string Link { get; private set; } + + } +} diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/SdkInfo_SecurityCenter.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/SdkInfo_SecurityCenter.cs index efebd6c72ac8..a8ab6266b61b 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/SdkInfo_SecurityCenter.cs +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/SdkInfo_SecurityCenter.cs @@ -44,6 +44,7 @@ public static IEnumerable> ApiInfo_SecurityCenter new Tuple("Security", "SecurityContacts", "2017-08-01-preview"), new Tuple("Security", "ServerVulnerabilityAssessment", "2019-01-01-preview"), new Tuple("Security", "Settings", "2019-01-01"), + new Tuple("Security", "SubAssessments", "2019-01-01-preview"), new Tuple("Security", "Tasks", "2015-06-01-preview"), new Tuple("Security", "Topology", "2015-06-01-preview"), new Tuple("Security", "WorkspaceSettings", "2017-08-01-preview"), @@ -52,11 +53,11 @@ public static IEnumerable> ApiInfo_SecurityCenter } // BEGIN: Code Generation Metadata Section public static readonly String AutoRestVersion = "latest"; - public static readonly String AutoRestBootStrapperVersion = "autorest@2.0.4283"; - public static readonly String AutoRestCmdExecuted = "cmd.exe /c autorest.cmd https://github.com/Azure/azure-rest-api-specs/blob/master/specification/security/resource-manager/readme.md --csharp --version=latest --reflect-api-versions --csharp-sdks-folder=C:\\git\\azure-sdk-for-net\\sdk"; + public static readonly String AutoRestBootStrapperVersion = "autorest@2.0.4407"; + public static readonly String AutoRestCmdExecuted = "cmd.exe /c autorest.cmd https://github.com/Azure/azure-rest-api-specs/blob/master/specification/security/resource-manager/readme.md --csharp --version=latest --reflect-api-versions --csharp-sdks-folder=C:\\github\\liran\\azure-sdk-for-net\\sdk"; public static readonly String GithubForkName = "Azure"; public static readonly String GithubBranchName = "master"; - public static readonly String GithubCommidId = "626308502df9fd4b4a7fafed44eceba9ee7ef1bf"; + public static readonly String GithubCommidId = "80a458c51677166e259b90316678e16c1ec614a0"; public static readonly String CodeGenerationErrors = ""; public static readonly String GithubRepoName = "azure-rest-api-specs"; // END: Code Generation Metadata Section diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/SecurityCenterClient.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/SecurityCenterClient.cs index 2c579f046c01..37335ef16728 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/SecurityCenterClient.cs +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/SecurityCenterClient.cs @@ -216,6 +216,11 @@ public partial class SecurityCenterClient : ServiceClient, /// public virtual IServerVulnerabilityAssessmentOperations ServerVulnerabilityAssessment { get; private set; } + /// + /// Gets the ISubAssessmentsOperations. + /// + public virtual ISubAssessmentsOperations SubAssessments { get; private set; } + /// /// Initializes a new instance of the SecurityCenterClient class. /// @@ -485,6 +490,7 @@ private void Initialize() RegulatoryComplianceControls = new RegulatoryComplianceControlsOperations(this); RegulatoryComplianceAssessments = new RegulatoryComplianceAssessmentsOperations(this); ServerVulnerabilityAssessment = new ServerVulnerabilityAssessmentOperations(this); + SubAssessments = new SubAssessmentsOperations(this); BaseUri = new System.Uri("https://management.azure.com"); AcceptLanguage = "en-US"; LongRunningOperationRetryTimeout = 30; @@ -517,6 +523,10 @@ private void Initialize() }; SerializationSettings.Converters.Add(new PolymorphicSerializeJsonConverter("kind")); DeserializationSettings.Converters.Add(new PolymorphicDeserializeJsonConverter("kind")); + SerializationSettings.Converters.Add(new PolymorphicSerializeJsonConverter("source")); + DeserializationSettings.Converters.Add(new PolymorphicDeserializeJsonConverter("source")); + SerializationSettings.Converters.Add(new PolymorphicSerializeJsonConverter("assessedResourceType")); + DeserializationSettings.Converters.Add(new PolymorphicDeserializeJsonConverter("assessedResourceType")); CustomInitialize(); DeserializationSettings.Converters.Add(new TransformationJsonConverter()); DeserializationSettings.Converters.Add(new CloudErrorJsonConverter()); diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/SubAssessmentsOperations.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/SubAssessmentsOperations.cs new file mode 100644 index 000000000000..a9be02c8a829 --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/SubAssessmentsOperations.cs @@ -0,0 +1,975 @@ +// +// Copyright (c) Microsoft Corporation. All rights reserved. +// Licensed under the MIT License. See License.txt in the project root for +// license information. +// +// Code generated by Microsoft (R) AutoRest Code Generator. +// Changes may cause incorrect behavior and will be lost if the code is +// regenerated. +// + +namespace Microsoft.Azure.Management.Security +{ + using Microsoft.Rest; + using Microsoft.Rest.Azure; + using Models; + using Newtonsoft.Json; + using System.Collections; + using System.Collections.Generic; + using System.Linq; + using System.Net; + using System.Net.Http; + using System.Threading; + using System.Threading.Tasks; + + /// + /// SubAssessmentsOperations operations. + /// + internal partial class SubAssessmentsOperations : IServiceOperations, ISubAssessmentsOperations + { + /// + /// Initializes a new instance of the SubAssessmentsOperations class. + /// + /// + /// Reference to the service client. + /// + /// + /// Thrown when a required parameter is null + /// + internal SubAssessmentsOperations(SecurityCenterClient client) + { + if (client == null) + { + throw new System.ArgumentNullException("client"); + } + Client = client; + } + + /// + /// Gets a reference to the SecurityCenterClient + /// + public SecurityCenterClient Client { get; private set; } + + /// + /// Get security sub-assessments on all your scanned resources inside a + /// subscription scope + /// + /// + /// Scope of the query, can be subscription + /// (/subscriptions/0b06d9ea-afe6-4779-bd59-30e5c2d9d13f) or management group + /// (/providers/Microsoft.Management/managementGroups/mgName). + /// + /// + /// Headers that will be added to request. + /// + /// + /// The cancellation token. + /// + /// + /// Thrown when the operation returned an invalid status code + /// + /// + /// Thrown when unable to deserialize the response + /// + /// + /// Thrown when a required parameter is null + /// + /// + /// Thrown when a required parameter is null + /// + /// + /// A response object containing the response body and response headers. + /// + public async Task>> ListAllWithHttpMessagesAsync(string scope, Dictionary> customHeaders = null, CancellationToken cancellationToken = default(CancellationToken)) + { + if (scope == null) + { + throw new ValidationException(ValidationRules.CannotBeNull, "scope"); + } + string apiVersion = "2019-01-01-preview"; + // Tracing + bool _shouldTrace = ServiceClientTracing.IsEnabled; + string _invocationId = null; + if (_shouldTrace) + { + _invocationId = ServiceClientTracing.NextInvocationId.ToString(); + Dictionary tracingParameters = new Dictionary(); + tracingParameters.Add("apiVersion", apiVersion); + tracingParameters.Add("scope", scope); + tracingParameters.Add("cancellationToken", cancellationToken); + ServiceClientTracing.Enter(_invocationId, this, "ListAll", tracingParameters); + } + // Construct URL + var _baseUrl = Client.BaseUri.AbsoluteUri; + var _url = new System.Uri(new System.Uri(_baseUrl + (_baseUrl.EndsWith("/") ? "" : "/")), "{scope}/providers/Microsoft.Security/subAssessments").ToString(); + _url = _url.Replace("{scope}", System.Uri.EscapeDataString(scope)); + List _queryParameters = new List(); + if (apiVersion != null) + { + _queryParameters.Add(string.Format("api-version={0}", System.Uri.EscapeDataString(apiVersion))); + } + if (_queryParameters.Count > 0) + { + _url += (_url.Contains("?") ? "&" : "?") + string.Join("&", _queryParameters); + } + // Create HTTP transport objects + var _httpRequest = new HttpRequestMessage(); + HttpResponseMessage _httpResponse = null; + _httpRequest.Method = new HttpMethod("GET"); + _httpRequest.RequestUri = new System.Uri(_url); + // Set Headers + if (Client.GenerateClientRequestId != null && Client.GenerateClientRequestId.Value) + { + _httpRequest.Headers.TryAddWithoutValidation("x-ms-client-request-id", System.Guid.NewGuid().ToString()); + } + if (Client.AcceptLanguage != null) + { + if (_httpRequest.Headers.Contains("accept-language")) + { + _httpRequest.Headers.Remove("accept-language"); + } + _httpRequest.Headers.TryAddWithoutValidation("accept-language", Client.AcceptLanguage); + } + + + if (customHeaders != null) + { + foreach(var _header in customHeaders) + { + if (_httpRequest.Headers.Contains(_header.Key)) + { + _httpRequest.Headers.Remove(_header.Key); + } + _httpRequest.Headers.TryAddWithoutValidation(_header.Key, _header.Value); + } + } + + // Serialize Request + string _requestContent = null; + // Set Credentials + if (Client.Credentials != null) + { + cancellationToken.ThrowIfCancellationRequested(); + await Client.Credentials.ProcessHttpRequestAsync(_httpRequest, cancellationToken).ConfigureAwait(false); + } + // Send Request + if (_shouldTrace) + { + ServiceClientTracing.SendRequest(_invocationId, _httpRequest); + } + cancellationToken.ThrowIfCancellationRequested(); + _httpResponse = await Client.HttpClient.SendAsync(_httpRequest, cancellationToken).ConfigureAwait(false); + if (_shouldTrace) + { + ServiceClientTracing.ReceiveResponse(_invocationId, _httpResponse); + } + HttpStatusCode _statusCode = _httpResponse.StatusCode; + cancellationToken.ThrowIfCancellationRequested(); + string _responseContent = null; + if ((int)_statusCode != 200) + { + var ex = new CloudException(string.Format("Operation returned an invalid status code '{0}'", _statusCode)); + try + { + _responseContent = await _httpResponse.Content.ReadAsStringAsync().ConfigureAwait(false); + CloudError _errorBody = Rest.Serialization.SafeJsonConvert.DeserializeObject(_responseContent, Client.DeserializationSettings); + if (_errorBody != null) + { + ex = new CloudException(_errorBody.Message); + ex.Body = _errorBody; + } + } + catch (JsonException) + { + // Ignore the exception + } + ex.Request = new HttpRequestMessageWrapper(_httpRequest, _requestContent); + ex.Response = new HttpResponseMessageWrapper(_httpResponse, _responseContent); + if (_httpResponse.Headers.Contains("x-ms-request-id")) + { + ex.RequestId = _httpResponse.Headers.GetValues("x-ms-request-id").FirstOrDefault(); + } + if (_shouldTrace) + { + ServiceClientTracing.Error(_invocationId, ex); + } + _httpRequest.Dispose(); + if (_httpResponse != null) + { + _httpResponse.Dispose(); + } + throw ex; + } + // Create Result + var _result = new AzureOperationResponse>(); + _result.Request = _httpRequest; + _result.Response = _httpResponse; + if (_httpResponse.Headers.Contains("x-ms-request-id")) + { + _result.RequestId = _httpResponse.Headers.GetValues("x-ms-request-id").FirstOrDefault(); + } + // Deserialize Response + if ((int)_statusCode == 200) + { + _responseContent = await _httpResponse.Content.ReadAsStringAsync().ConfigureAwait(false); + try + { + _result.Body = Rest.Serialization.SafeJsonConvert.DeserializeObject>(_responseContent, Client.DeserializationSettings); + } + catch (JsonException ex) + { + _httpRequest.Dispose(); + if (_httpResponse != null) + { + _httpResponse.Dispose(); + } + throw new SerializationException("Unable to deserialize the response.", _responseContent, ex); + } + } + if (_shouldTrace) + { + ServiceClientTracing.Exit(_invocationId, _result); + } + return _result; + } + + /// + /// Get security sub-assessments on all your scanned resources inside a scope + /// + /// + /// Scope of the query, can be subscription + /// (/subscriptions/0b06d9ea-afe6-4779-bd59-30e5c2d9d13f) or management group + /// (/providers/Microsoft.Management/managementGroups/mgName). + /// + /// + /// The Assessment Key - Unique key for the assessment type + /// + /// + /// Headers that will be added to request. + /// + /// + /// The cancellation token. + /// + /// + /// Thrown when the operation returned an invalid status code + /// + /// + /// Thrown when unable to deserialize the response + /// + /// + /// Thrown when a required parameter is null + /// + /// + /// Thrown when a required parameter is null + /// + /// + /// A response object containing the response body and response headers. + /// + public async Task>> ListWithHttpMessagesAsync(string scope, string assessmentName, Dictionary> customHeaders = null, CancellationToken cancellationToken = default(CancellationToken)) + { + if (scope == null) + { + throw new ValidationException(ValidationRules.CannotBeNull, "scope"); + } + if (assessmentName == null) + { + throw new ValidationException(ValidationRules.CannotBeNull, "assessmentName"); + } + string apiVersion = "2019-01-01-preview"; + // Tracing + bool _shouldTrace = ServiceClientTracing.IsEnabled; + string _invocationId = null; + if (_shouldTrace) + { + _invocationId = ServiceClientTracing.NextInvocationId.ToString(); + Dictionary tracingParameters = new Dictionary(); + tracingParameters.Add("apiVersion", apiVersion); + tracingParameters.Add("scope", scope); + tracingParameters.Add("assessmentName", assessmentName); + tracingParameters.Add("cancellationToken", cancellationToken); + ServiceClientTracing.Enter(_invocationId, this, "List", tracingParameters); + } + // Construct URL + var _baseUrl = Client.BaseUri.AbsoluteUri; + var _url = new System.Uri(new System.Uri(_baseUrl + (_baseUrl.EndsWith("/") ? "" : "/")), "{scope}/providers/Microsoft.Security/assessments/{assessmentName}/subAssessments").ToString(); + _url = _url.Replace("{scope}", System.Uri.EscapeDataString(scope)); + _url = _url.Replace("{assessmentName}", System.Uri.EscapeDataString(assessmentName)); + List _queryParameters = new List(); + if (apiVersion != null) + { + _queryParameters.Add(string.Format("api-version={0}", System.Uri.EscapeDataString(apiVersion))); + } + if (_queryParameters.Count > 0) + { + _url += (_url.Contains("?") ? "&" : "?") + string.Join("&", _queryParameters); + } + // Create HTTP transport objects + var _httpRequest = new HttpRequestMessage(); + HttpResponseMessage _httpResponse = null; + _httpRequest.Method = new HttpMethod("GET"); + _httpRequest.RequestUri = new System.Uri(_url); + // Set Headers + if (Client.GenerateClientRequestId != null && Client.GenerateClientRequestId.Value) + { + _httpRequest.Headers.TryAddWithoutValidation("x-ms-client-request-id", System.Guid.NewGuid().ToString()); + } + if (Client.AcceptLanguage != null) + { + if (_httpRequest.Headers.Contains("accept-language")) + { + _httpRequest.Headers.Remove("accept-language"); + } + _httpRequest.Headers.TryAddWithoutValidation("accept-language", Client.AcceptLanguage); + } + + + if (customHeaders != null) + { + foreach(var _header in customHeaders) + { + if (_httpRequest.Headers.Contains(_header.Key)) + { + _httpRequest.Headers.Remove(_header.Key); + } + _httpRequest.Headers.TryAddWithoutValidation(_header.Key, _header.Value); + } + } + + // Serialize Request + string _requestContent = null; + // Set Credentials + if (Client.Credentials != null) + { + cancellationToken.ThrowIfCancellationRequested(); + await Client.Credentials.ProcessHttpRequestAsync(_httpRequest, cancellationToken).ConfigureAwait(false); + } + // Send Request + if (_shouldTrace) + { + ServiceClientTracing.SendRequest(_invocationId, _httpRequest); + } + cancellationToken.ThrowIfCancellationRequested(); + _httpResponse = await Client.HttpClient.SendAsync(_httpRequest, cancellationToken).ConfigureAwait(false); + if (_shouldTrace) + { + ServiceClientTracing.ReceiveResponse(_invocationId, _httpResponse); + } + HttpStatusCode _statusCode = _httpResponse.StatusCode; + cancellationToken.ThrowIfCancellationRequested(); + string _responseContent = null; + if ((int)_statusCode != 200) + { + var ex = new CloudException(string.Format("Operation returned an invalid status code '{0}'", _statusCode)); + try + { + _responseContent = await _httpResponse.Content.ReadAsStringAsync().ConfigureAwait(false); + CloudError _errorBody = Rest.Serialization.SafeJsonConvert.DeserializeObject(_responseContent, Client.DeserializationSettings); + if (_errorBody != null) + { + ex = new CloudException(_errorBody.Message); + ex.Body = _errorBody; + } + } + catch (JsonException) + { + // Ignore the exception + } + ex.Request = new HttpRequestMessageWrapper(_httpRequest, _requestContent); + ex.Response = new HttpResponseMessageWrapper(_httpResponse, _responseContent); + if (_httpResponse.Headers.Contains("x-ms-request-id")) + { + ex.RequestId = _httpResponse.Headers.GetValues("x-ms-request-id").FirstOrDefault(); + } + if (_shouldTrace) + { + ServiceClientTracing.Error(_invocationId, ex); + } + _httpRequest.Dispose(); + if (_httpResponse != null) + { + _httpResponse.Dispose(); + } + throw ex; + } + // Create Result + var _result = new AzureOperationResponse>(); + _result.Request = _httpRequest; + _result.Response = _httpResponse; + if (_httpResponse.Headers.Contains("x-ms-request-id")) + { + _result.RequestId = _httpResponse.Headers.GetValues("x-ms-request-id").FirstOrDefault(); + } + // Deserialize Response + if ((int)_statusCode == 200) + { + _responseContent = await _httpResponse.Content.ReadAsStringAsync().ConfigureAwait(false); + try + { + _result.Body = Rest.Serialization.SafeJsonConvert.DeserializeObject>(_responseContent, Client.DeserializationSettings); + } + catch (JsonException ex) + { + _httpRequest.Dispose(); + if (_httpResponse != null) + { + _httpResponse.Dispose(); + } + throw new SerializationException("Unable to deserialize the response.", _responseContent, ex); + } + } + if (_shouldTrace) + { + ServiceClientTracing.Exit(_invocationId, _result); + } + return _result; + } + + /// + /// Get a security sub-assessment on your scanned resource + /// + /// + /// Scope of the query, can be subscription + /// (/subscriptions/0b06d9ea-afe6-4779-bd59-30e5c2d9d13f) or management group + /// (/providers/Microsoft.Management/managementGroups/mgName). + /// + /// + /// The Assessment Key - Unique key for the assessment type + /// + /// + /// The Sub-Assessment Key - Unique key for the sub-assessment type + /// + /// + /// Headers that will be added to request. + /// + /// + /// The cancellation token. + /// + /// + /// Thrown when the operation returned an invalid status code + /// + /// + /// Thrown when unable to deserialize the response + /// + /// + /// Thrown when a required parameter is null + /// + /// + /// Thrown when a required parameter is null + /// + /// + /// A response object containing the response body and response headers. + /// + public async Task> GetWithHttpMessagesAsync(string scope, string assessmentName, string subAssessmentName, Dictionary> customHeaders = null, CancellationToken cancellationToken = default(CancellationToken)) + { + if (scope == null) + { + throw new ValidationException(ValidationRules.CannotBeNull, "scope"); + } + if (assessmentName == null) + { + throw new ValidationException(ValidationRules.CannotBeNull, "assessmentName"); + } + if (subAssessmentName == null) + { + throw new ValidationException(ValidationRules.CannotBeNull, "subAssessmentName"); + } + string apiVersion = "2019-01-01-preview"; + // Tracing + bool _shouldTrace = ServiceClientTracing.IsEnabled; + string _invocationId = null; + if (_shouldTrace) + { + _invocationId = ServiceClientTracing.NextInvocationId.ToString(); + Dictionary tracingParameters = new Dictionary(); + tracingParameters.Add("apiVersion", apiVersion); + tracingParameters.Add("scope", scope); + tracingParameters.Add("assessmentName", assessmentName); + tracingParameters.Add("subAssessmentName", subAssessmentName); + tracingParameters.Add("cancellationToken", cancellationToken); + ServiceClientTracing.Enter(_invocationId, this, "Get", tracingParameters); + } + // Construct URL + var _baseUrl = Client.BaseUri.AbsoluteUri; + var _url = new System.Uri(new System.Uri(_baseUrl + (_baseUrl.EndsWith("/") ? "" : "/")), "{scope}/providers/Microsoft.Security/assessments/{assessmentName}/subAssessments/{subAssessmentName}").ToString(); + _url = _url.Replace("{scope}", System.Uri.EscapeDataString(scope)); + _url = _url.Replace("{assessmentName}", System.Uri.EscapeDataString(assessmentName)); + _url = _url.Replace("{subAssessmentName}", System.Uri.EscapeDataString(subAssessmentName)); + List _queryParameters = new List(); + if (apiVersion != null) + { + _queryParameters.Add(string.Format("api-version={0}", System.Uri.EscapeDataString(apiVersion))); + } + if (_queryParameters.Count > 0) + { + _url += (_url.Contains("?") ? "&" : "?") + string.Join("&", _queryParameters); + } + // Create HTTP transport objects + var _httpRequest = new HttpRequestMessage(); + HttpResponseMessage _httpResponse = null; + _httpRequest.Method = new HttpMethod("GET"); + _httpRequest.RequestUri = new System.Uri(_url); + // Set Headers + if (Client.GenerateClientRequestId != null && Client.GenerateClientRequestId.Value) + { + _httpRequest.Headers.TryAddWithoutValidation("x-ms-client-request-id", System.Guid.NewGuid().ToString()); + } + if (Client.AcceptLanguage != null) + { + if (_httpRequest.Headers.Contains("accept-language")) + { + _httpRequest.Headers.Remove("accept-language"); + } + _httpRequest.Headers.TryAddWithoutValidation("accept-language", Client.AcceptLanguage); + } + + + if (customHeaders != null) + { + foreach(var _header in customHeaders) + { + if (_httpRequest.Headers.Contains(_header.Key)) + { + _httpRequest.Headers.Remove(_header.Key); + } + _httpRequest.Headers.TryAddWithoutValidation(_header.Key, _header.Value); + } + } + + // Serialize Request + string _requestContent = null; + // Set Credentials + if (Client.Credentials != null) + { + cancellationToken.ThrowIfCancellationRequested(); + await Client.Credentials.ProcessHttpRequestAsync(_httpRequest, cancellationToken).ConfigureAwait(false); + } + // Send Request + if (_shouldTrace) + { + ServiceClientTracing.SendRequest(_invocationId, _httpRequest); + } + cancellationToken.ThrowIfCancellationRequested(); + _httpResponse = await Client.HttpClient.SendAsync(_httpRequest, cancellationToken).ConfigureAwait(false); + if (_shouldTrace) + { + ServiceClientTracing.ReceiveResponse(_invocationId, _httpResponse); + } + HttpStatusCode _statusCode = _httpResponse.StatusCode; + cancellationToken.ThrowIfCancellationRequested(); + string _responseContent = null; + if ((int)_statusCode != 200) + { + var ex = new CloudException(string.Format("Operation returned an invalid status code '{0}'", _statusCode)); + try + { + _responseContent = await _httpResponse.Content.ReadAsStringAsync().ConfigureAwait(false); + CloudError _errorBody = Rest.Serialization.SafeJsonConvert.DeserializeObject(_responseContent, Client.DeserializationSettings); + if (_errorBody != null) + { + ex = new CloudException(_errorBody.Message); + ex.Body = _errorBody; + } + } + catch (JsonException) + { + // Ignore the exception + } + ex.Request = new HttpRequestMessageWrapper(_httpRequest, _requestContent); + ex.Response = new HttpResponseMessageWrapper(_httpResponse, _responseContent); + if (_httpResponse.Headers.Contains("x-ms-request-id")) + { + ex.RequestId = _httpResponse.Headers.GetValues("x-ms-request-id").FirstOrDefault(); + } + if (_shouldTrace) + { + ServiceClientTracing.Error(_invocationId, ex); + } + _httpRequest.Dispose(); + if (_httpResponse != null) + { + _httpResponse.Dispose(); + } + throw ex; + } + // Create Result + var _result = new AzureOperationResponse(); + _result.Request = _httpRequest; + _result.Response = _httpResponse; + if (_httpResponse.Headers.Contains("x-ms-request-id")) + { + _result.RequestId = _httpResponse.Headers.GetValues("x-ms-request-id").FirstOrDefault(); + } + // Deserialize Response + if ((int)_statusCode == 200) + { + _responseContent = await _httpResponse.Content.ReadAsStringAsync().ConfigureAwait(false); + try + { + _result.Body = Rest.Serialization.SafeJsonConvert.DeserializeObject(_responseContent, Client.DeserializationSettings); + } + catch (JsonException ex) + { + _httpRequest.Dispose(); + if (_httpResponse != null) + { + _httpResponse.Dispose(); + } + throw new SerializationException("Unable to deserialize the response.", _responseContent, ex); + } + } + if (_shouldTrace) + { + ServiceClientTracing.Exit(_invocationId, _result); + } + return _result; + } + + /// + /// Get security sub-assessments on all your scanned resources inside a + /// subscription scope + /// + /// + /// The NextLink from the previous successful call to List operation. + /// + /// + /// Headers that will be added to request. + /// + /// + /// The cancellation token. + /// + /// + /// Thrown when the operation returned an invalid status code + /// + /// + /// Thrown when unable to deserialize the response + /// + /// + /// Thrown when a required parameter is null + /// + /// + /// Thrown when a required parameter is null + /// + /// + /// A response object containing the response body and response headers. + /// + public async Task>> ListAllNextWithHttpMessagesAsync(string nextPageLink, Dictionary> customHeaders = null, CancellationToken cancellationToken = default(CancellationToken)) + { + if (nextPageLink == null) + { + throw new ValidationException(ValidationRules.CannotBeNull, "nextPageLink"); + } + // Tracing + bool _shouldTrace = ServiceClientTracing.IsEnabled; + string _invocationId = null; + if (_shouldTrace) + { + _invocationId = ServiceClientTracing.NextInvocationId.ToString(); + Dictionary tracingParameters = new Dictionary(); + tracingParameters.Add("nextPageLink", nextPageLink); + tracingParameters.Add("cancellationToken", cancellationToken); + ServiceClientTracing.Enter(_invocationId, this, "ListAllNext", tracingParameters); + } + // Construct URL + string _url = "{nextLink}"; + _url = _url.Replace("{nextLink}", nextPageLink); + List _queryParameters = new List(); + if (_queryParameters.Count > 0) + { + _url += (_url.Contains("?") ? "&" : "?") + string.Join("&", _queryParameters); + } + // Create HTTP transport objects + var _httpRequest = new HttpRequestMessage(); + HttpResponseMessage _httpResponse = null; + _httpRequest.Method = new HttpMethod("GET"); + _httpRequest.RequestUri = new System.Uri(_url); + // Set Headers + if (Client.GenerateClientRequestId != null && Client.GenerateClientRequestId.Value) + { + _httpRequest.Headers.TryAddWithoutValidation("x-ms-client-request-id", System.Guid.NewGuid().ToString()); + } + if (Client.AcceptLanguage != null) + { + if (_httpRequest.Headers.Contains("accept-language")) + { + _httpRequest.Headers.Remove("accept-language"); + } + _httpRequest.Headers.TryAddWithoutValidation("accept-language", Client.AcceptLanguage); + } + + + if (customHeaders != null) + { + foreach(var _header in customHeaders) + { + if (_httpRequest.Headers.Contains(_header.Key)) + { + _httpRequest.Headers.Remove(_header.Key); + } + _httpRequest.Headers.TryAddWithoutValidation(_header.Key, _header.Value); + } + } + + // Serialize Request + string _requestContent = null; + // Set Credentials + if (Client.Credentials != null) + { + cancellationToken.ThrowIfCancellationRequested(); + await Client.Credentials.ProcessHttpRequestAsync(_httpRequest, cancellationToken).ConfigureAwait(false); + } + // Send Request + if (_shouldTrace) + { + ServiceClientTracing.SendRequest(_invocationId, _httpRequest); + } + cancellationToken.ThrowIfCancellationRequested(); + _httpResponse = await Client.HttpClient.SendAsync(_httpRequest, cancellationToken).ConfigureAwait(false); + if (_shouldTrace) + { + ServiceClientTracing.ReceiveResponse(_invocationId, _httpResponse); + } + HttpStatusCode _statusCode = _httpResponse.StatusCode; + cancellationToken.ThrowIfCancellationRequested(); + string _responseContent = null; + if ((int)_statusCode != 200) + { + var ex = new CloudException(string.Format("Operation returned an invalid status code '{0}'", _statusCode)); + try + { + _responseContent = await _httpResponse.Content.ReadAsStringAsync().ConfigureAwait(false); + CloudError _errorBody = Rest.Serialization.SafeJsonConvert.DeserializeObject(_responseContent, Client.DeserializationSettings); + if (_errorBody != null) + { + ex = new CloudException(_errorBody.Message); + ex.Body = _errorBody; + } + } + catch (JsonException) + { + // Ignore the exception + } + ex.Request = new HttpRequestMessageWrapper(_httpRequest, _requestContent); + ex.Response = new HttpResponseMessageWrapper(_httpResponse, _responseContent); + if (_httpResponse.Headers.Contains("x-ms-request-id")) + { + ex.RequestId = _httpResponse.Headers.GetValues("x-ms-request-id").FirstOrDefault(); + } + if (_shouldTrace) + { + ServiceClientTracing.Error(_invocationId, ex); + } + _httpRequest.Dispose(); + if (_httpResponse != null) + { + _httpResponse.Dispose(); + } + throw ex; + } + // Create Result + var _result = new AzureOperationResponse>(); + _result.Request = _httpRequest; + _result.Response = _httpResponse; + if (_httpResponse.Headers.Contains("x-ms-request-id")) + { + _result.RequestId = _httpResponse.Headers.GetValues("x-ms-request-id").FirstOrDefault(); + } + // Deserialize Response + if ((int)_statusCode == 200) + { + _responseContent = await _httpResponse.Content.ReadAsStringAsync().ConfigureAwait(false); + try + { + _result.Body = Rest.Serialization.SafeJsonConvert.DeserializeObject>(_responseContent, Client.DeserializationSettings); + } + catch (JsonException ex) + { + _httpRequest.Dispose(); + if (_httpResponse != null) + { + _httpResponse.Dispose(); + } + throw new SerializationException("Unable to deserialize the response.", _responseContent, ex); + } + } + if (_shouldTrace) + { + ServiceClientTracing.Exit(_invocationId, _result); + } + return _result; + } + + /// + /// Get security sub-assessments on all your scanned resources inside a scope + /// + /// + /// The NextLink from the previous successful call to List operation. + /// + /// + /// Headers that will be added to request. + /// + /// + /// The cancellation token. + /// + /// + /// Thrown when the operation returned an invalid status code + /// + /// + /// Thrown when unable to deserialize the response + /// + /// + /// Thrown when a required parameter is null + /// + /// + /// Thrown when a required parameter is null + /// + /// + /// A response object containing the response body and response headers. + /// + public async Task>> ListNextWithHttpMessagesAsync(string nextPageLink, Dictionary> customHeaders = null, CancellationToken cancellationToken = default(CancellationToken)) + { + if (nextPageLink == null) + { + throw new ValidationException(ValidationRules.CannotBeNull, "nextPageLink"); + } + // Tracing + bool _shouldTrace = ServiceClientTracing.IsEnabled; + string _invocationId = null; + if (_shouldTrace) + { + _invocationId = ServiceClientTracing.NextInvocationId.ToString(); + Dictionary tracingParameters = new Dictionary(); + tracingParameters.Add("nextPageLink", nextPageLink); + tracingParameters.Add("cancellationToken", cancellationToken); + ServiceClientTracing.Enter(_invocationId, this, "ListNext", tracingParameters); + } + // Construct URL + string _url = "{nextLink}"; + _url = _url.Replace("{nextLink}", nextPageLink); + List _queryParameters = new List(); + if (_queryParameters.Count > 0) + { + _url += (_url.Contains("?") ? "&" : "?") + string.Join("&", _queryParameters); + } + // Create HTTP transport objects + var _httpRequest = new HttpRequestMessage(); + HttpResponseMessage _httpResponse = null; + _httpRequest.Method = new HttpMethod("GET"); + _httpRequest.RequestUri = new System.Uri(_url); + // Set Headers + if (Client.GenerateClientRequestId != null && Client.GenerateClientRequestId.Value) + { + _httpRequest.Headers.TryAddWithoutValidation("x-ms-client-request-id", System.Guid.NewGuid().ToString()); + } + if (Client.AcceptLanguage != null) + { + if (_httpRequest.Headers.Contains("accept-language")) + { + _httpRequest.Headers.Remove("accept-language"); + } + _httpRequest.Headers.TryAddWithoutValidation("accept-language", Client.AcceptLanguage); + } + + + if (customHeaders != null) + { + foreach(var _header in customHeaders) + { + if (_httpRequest.Headers.Contains(_header.Key)) + { + _httpRequest.Headers.Remove(_header.Key); + } + _httpRequest.Headers.TryAddWithoutValidation(_header.Key, _header.Value); + } + } + + // Serialize Request + string _requestContent = null; + // Set Credentials + if (Client.Credentials != null) + { + cancellationToken.ThrowIfCancellationRequested(); + await Client.Credentials.ProcessHttpRequestAsync(_httpRequest, cancellationToken).ConfigureAwait(false); + } + // Send Request + if (_shouldTrace) + { + ServiceClientTracing.SendRequest(_invocationId, _httpRequest); + } + cancellationToken.ThrowIfCancellationRequested(); + _httpResponse = await Client.HttpClient.SendAsync(_httpRequest, cancellationToken).ConfigureAwait(false); + if (_shouldTrace) + { + ServiceClientTracing.ReceiveResponse(_invocationId, _httpResponse); + } + HttpStatusCode _statusCode = _httpResponse.StatusCode; + cancellationToken.ThrowIfCancellationRequested(); + string _responseContent = null; + if ((int)_statusCode != 200) + { + var ex = new CloudException(string.Format("Operation returned an invalid status code '{0}'", _statusCode)); + try + { + _responseContent = await _httpResponse.Content.ReadAsStringAsync().ConfigureAwait(false); + CloudError _errorBody = Rest.Serialization.SafeJsonConvert.DeserializeObject(_responseContent, Client.DeserializationSettings); + if (_errorBody != null) + { + ex = new CloudException(_errorBody.Message); + ex.Body = _errorBody; + } + } + catch (JsonException) + { + // Ignore the exception + } + ex.Request = new HttpRequestMessageWrapper(_httpRequest, _requestContent); + ex.Response = new HttpResponseMessageWrapper(_httpResponse, _responseContent); + if (_httpResponse.Headers.Contains("x-ms-request-id")) + { + ex.RequestId = _httpResponse.Headers.GetValues("x-ms-request-id").FirstOrDefault(); + } + if (_shouldTrace) + { + ServiceClientTracing.Error(_invocationId, ex); + } + _httpRequest.Dispose(); + if (_httpResponse != null) + { + _httpResponse.Dispose(); + } + throw ex; + } + // Create Result + var _result = new AzureOperationResponse>(); + _result.Request = _httpRequest; + _result.Response = _httpResponse; + if (_httpResponse.Headers.Contains("x-ms-request-id")) + { + _result.RequestId = _httpResponse.Headers.GetValues("x-ms-request-id").FirstOrDefault(); + } + // Deserialize Response + if ((int)_statusCode == 200) + { + _responseContent = await _httpResponse.Content.ReadAsStringAsync().ConfigureAwait(false); + try + { + _result.Body = Rest.Serialization.SafeJsonConvert.DeserializeObject>(_responseContent, Client.DeserializationSettings); + } + catch (JsonException ex) + { + _httpRequest.Dispose(); + if (_httpResponse != null) + { + _httpResponse.Dispose(); + } + throw new SerializationException("Unable to deserialize the response.", _responseContent, ex); + } + } + if (_shouldTrace) + { + ServiceClientTracing.Exit(_invocationId, _result); + } + return _result; + } + + } +} diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/SubAssessmentsOperationsExtensions.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/SubAssessmentsOperationsExtensions.cs new file mode 100644 index 000000000000..afe53f2d6811 --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Generated/SubAssessmentsOperationsExtensions.cs @@ -0,0 +1,229 @@ +// +// Copyright (c) Microsoft Corporation. All rights reserved. +// Licensed under the MIT License. See License.txt in the project root for +// license information. +// +// Code generated by Microsoft (R) AutoRest Code Generator. +// Changes may cause incorrect behavior and will be lost if the code is +// regenerated. +// + +namespace Microsoft.Azure.Management.Security +{ + using Microsoft.Rest; + using Microsoft.Rest.Azure; + using Models; + using System.Threading; + using System.Threading.Tasks; + + /// + /// Extension methods for SubAssessmentsOperations. + /// + public static partial class SubAssessmentsOperationsExtensions + { + /// + /// Get security sub-assessments on all your scanned resources inside a + /// subscription scope + /// + /// + /// The operations group for this extension method. + /// + /// + /// Scope of the query, can be subscription + /// (/subscriptions/0b06d9ea-afe6-4779-bd59-30e5c2d9d13f) or management group + /// (/providers/Microsoft.Management/managementGroups/mgName). + /// + public static IPage ListAll(this ISubAssessmentsOperations operations, string scope) + { + return operations.ListAllAsync(scope).GetAwaiter().GetResult(); + } + + /// + /// Get security sub-assessments on all your scanned resources inside a + /// subscription scope + /// + /// + /// The operations group for this extension method. + /// + /// + /// Scope of the query, can be subscription + /// (/subscriptions/0b06d9ea-afe6-4779-bd59-30e5c2d9d13f) or management group + /// (/providers/Microsoft.Management/managementGroups/mgName). + /// + /// + /// The cancellation token. + /// + public static async Task> ListAllAsync(this ISubAssessmentsOperations operations, string scope, CancellationToken cancellationToken = default(CancellationToken)) + { + using (var _result = await operations.ListAllWithHttpMessagesAsync(scope, null, cancellationToken).ConfigureAwait(false)) + { + return _result.Body; + } + } + + /// + /// Get security sub-assessments on all your scanned resources inside a scope + /// + /// + /// The operations group for this extension method. + /// + /// + /// Scope of the query, can be subscription + /// (/subscriptions/0b06d9ea-afe6-4779-bd59-30e5c2d9d13f) or management group + /// (/providers/Microsoft.Management/managementGroups/mgName). + /// + /// + /// The Assessment Key - Unique key for the assessment type + /// + public static IPage List(this ISubAssessmentsOperations operations, string scope, string assessmentName) + { + return operations.ListAsync(scope, assessmentName).GetAwaiter().GetResult(); + } + + /// + /// Get security sub-assessments on all your scanned resources inside a scope + /// + /// + /// The operations group for this extension method. + /// + /// + /// Scope of the query, can be subscription + /// (/subscriptions/0b06d9ea-afe6-4779-bd59-30e5c2d9d13f) or management group + /// (/providers/Microsoft.Management/managementGroups/mgName). + /// + /// + /// The Assessment Key - Unique key for the assessment type + /// + /// + /// The cancellation token. + /// + public static async Task> ListAsync(this ISubAssessmentsOperations operations, string scope, string assessmentName, CancellationToken cancellationToken = default(CancellationToken)) + { + using (var _result = await operations.ListWithHttpMessagesAsync(scope, assessmentName, null, cancellationToken).ConfigureAwait(false)) + { + return _result.Body; + } + } + + /// + /// Get a security sub-assessment on your scanned resource + /// + /// + /// The operations group for this extension method. + /// + /// + /// Scope of the query, can be subscription + /// (/subscriptions/0b06d9ea-afe6-4779-bd59-30e5c2d9d13f) or management group + /// (/providers/Microsoft.Management/managementGroups/mgName). + /// + /// + /// The Assessment Key - Unique key for the assessment type + /// + /// + /// The Sub-Assessment Key - Unique key for the sub-assessment type + /// + public static SecuritySubAssessment Get(this ISubAssessmentsOperations operations, string scope, string assessmentName, string subAssessmentName) + { + return operations.GetAsync(scope, assessmentName, subAssessmentName).GetAwaiter().GetResult(); + } + + /// + /// Get a security sub-assessment on your scanned resource + /// + /// + /// The operations group for this extension method. + /// + /// + /// Scope of the query, can be subscription + /// (/subscriptions/0b06d9ea-afe6-4779-bd59-30e5c2d9d13f) or management group + /// (/providers/Microsoft.Management/managementGroups/mgName). + /// + /// + /// The Assessment Key - Unique key for the assessment type + /// + /// + /// The Sub-Assessment Key - Unique key for the sub-assessment type + /// + /// + /// The cancellation token. + /// + public static async Task GetAsync(this ISubAssessmentsOperations operations, string scope, string assessmentName, string subAssessmentName, CancellationToken cancellationToken = default(CancellationToken)) + { + using (var _result = await operations.GetWithHttpMessagesAsync(scope, assessmentName, subAssessmentName, null, cancellationToken).ConfigureAwait(false)) + { + return _result.Body; + } + } + + /// + /// Get security sub-assessments on all your scanned resources inside a + /// subscription scope + /// + /// + /// The operations group for this extension method. + /// + /// + /// The NextLink from the previous successful call to List operation. + /// + public static IPage ListAllNext(this ISubAssessmentsOperations operations, string nextPageLink) + { + return operations.ListAllNextAsync(nextPageLink).GetAwaiter().GetResult(); + } + + /// + /// Get security sub-assessments on all your scanned resources inside a + /// subscription scope + /// + /// + /// The operations group for this extension method. + /// + /// + /// The NextLink from the previous successful call to List operation. + /// + /// + /// The cancellation token. + /// + public static async Task> ListAllNextAsync(this ISubAssessmentsOperations operations, string nextPageLink, CancellationToken cancellationToken = default(CancellationToken)) + { + using (var _result = await operations.ListAllNextWithHttpMessagesAsync(nextPageLink, null, cancellationToken).ConfigureAwait(false)) + { + return _result.Body; + } + } + + /// + /// Get security sub-assessments on all your scanned resources inside a scope + /// + /// + /// The operations group for this extension method. + /// + /// + /// The NextLink from the previous successful call to List operation. + /// + public static IPage ListNext(this ISubAssessmentsOperations operations, string nextPageLink) + { + return operations.ListNextAsync(nextPageLink).GetAwaiter().GetResult(); + } + + /// + /// Get security sub-assessments on all your scanned resources inside a scope + /// + /// + /// The operations group for this extension method. + /// + /// + /// The NextLink from the previous successful call to List operation. + /// + /// + /// The cancellation token. + /// + public static async Task> ListNextAsync(this ISubAssessmentsOperations operations, string nextPageLink, CancellationToken cancellationToken = default(CancellationToken)) + { + using (var _result = await operations.ListNextWithHttpMessagesAsync(nextPageLink, null, cancellationToken).ConfigureAwait(false)) + { + return _result.Body; + } + } + + } +} diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Microsoft.Azure.Management.SecurityCenter.csproj b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Microsoft.Azure.Management.SecurityCenter.csproj index 2aaf1e05272f..1857e2175881 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Microsoft.Azure.Management.SecurityCenter.csproj +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Microsoft.Azure.Management.SecurityCenter.csproj @@ -6,7 +6,7 @@ Microsoft.Azure.Management.SecurityCenter Provides developers with libraries for the updated Azure Security Center platform under Azure Resource manager to view and manage security posture in and outside Azure. - 1.0.1 + 1.1.0 Microsoft.Azure.Management.SecurityCenter management;security center;security;IoT security; Added support for IoT security. diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Properties/AssemblyInfo.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Properties/AssemblyInfo.cs index 65a1db8b3b3a..873b74ac47ad 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Properties/AssemblyInfo.cs +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/src/Properties/AssemblyInfo.cs @@ -7,8 +7,8 @@ [assembly: AssemblyTitle("Microsoft Azure Security Center Library")] [assembly: AssemblyDescription("Provides management functionality for Microsoft Azure Security Center Resources.")] -[assembly: AssemblyVersion("1.0.0.0")] -[assembly: AssemblyFileVersion("1.0.1.0")] +[assembly: AssemblyVersion("1.1.0.0")] +[assembly: AssemblyFileVersion("1.1.0.0")] [assembly: AssemblyConfiguration("")] [assembly: AssemblyCompany("Microsoft")] [assembly: AssemblyProduct("Microsoft Azure .NET SDK")] diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/IotSecuritySolutionsAnalyticsAggregatedAlert/IotSecuritySolutionsAnalyticsAggregatedAlertTests.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/IotSecuritySolutionsAnalyticsAggregatedAlert/IotSecuritySolutionsAnalyticsAggregatedAlertTests.cs index 0ecf661c2892..8db327a31e08 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/IotSecuritySolutionsAnalyticsAggregatedAlert/IotSecuritySolutionsAnalyticsAggregatedAlertTests.cs +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/IotSecuritySolutionsAnalyticsAggregatedAlert/IotSecuritySolutionsAnalyticsAggregatedAlertTests.cs @@ -17,10 +17,10 @@ public class IotSecuritySolutionsAnalyticsAggregatedAlertTests : TestBase { #region Test setup - private static readonly string AggregatedAlertName = "IoT_SuspiciousUseradd/2019-09-15"; - private static readonly string ResourceGroupName = "ResourceGroup-CUS"; - private static readonly string SolutionName = "IotHub-CUS"; - private static readonly string AscLocation = "centralus"; + private static readonly string AggregatedAlertName = "IoT_AgentDroppedEvents/2019-05-26"; + private static readonly string ResourceGroupName = "nir-test"; + private static readonly string SolutionName = "singahub"; + private static readonly string AscLocation = "southeastasia"; private static TestEnvironment TestEnvironment { get; set; } private static SecurityCenterClient GetSecurityCenterClient(MockContext context) diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_CreateOrUpdate.json b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_CreateOrUpdate.json index c929ac933717..cb52b3f38939 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_CreateOrUpdate.json +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_CreateOrUpdate.json @@ -7,7 +7,7 @@ "RequestBody": "{\r\n \"location\": \"centralus\",\r\n \"properties\": {\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/ResourceGroup-CUS/providers/Microsoft.OperationalInsights/workspaces/LogAnalytics-CUS\",\r\n \"displayName\": \"IotHub-CUS-LogAnalytics-CUS\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/ResourceGroup-CUS/providers/Microsoft.Devices/IotHubs/IotHub-CUS\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where name contains \\\"v2\\\"\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n }\r\n }\r\n}", "RequestHeaders": { "x-ms-client-request-id": [ - "432e53a3-9412-4c10-ab83-d26f1d2a5b8a" + "bcf7dd57-80ff-4496-b726-e8974cb3401b" ], "accept-language": [ "en-US" @@ -15,8 +15,8 @@ "User-Agent": [ "FxVersion/4.6.26614.01", "OSName/Windows", - "OSVersion/Microsoft.Windows.10.0.18362.", - "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.0.0" + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.1.0" ], "Content-Type": [ "application/json; charset=utf-8" @@ -30,7 +30,7 @@ "no-cache" ], "Date": [ - "Sun, 15 Sep 2019 09:13:45 GMT" + "Thu, 07 Nov 2019 14:20:18 GMT" ], "Pragma": [ "no-cache" @@ -42,13 +42,13 @@ "249" ], "x-ms-request-id": [ - "b683881f-7eb9-4b9c-a1d3-b74985c1cf10" + "d42abc09-f800-4156-9f0f-7bc3e41887c4" ], "x-ms-correlation-request-id": [ - "b683881f-7eb9-4b9c-a1d3-b74985c1cf10" + "d42abc09-f800-4156-9f0f-7bc3e41887c4" ], "x-ms-routing-request-id": [ - "UKSOUTH2:20190915T091345Z:b683881f-7eb9-4b9c-a1d3-b74985c1cf10" + "UKSOUTH2:20191107T142019Z:d42abc09-f800-4156-9f0f-7bc3e41887c4" ], "Strict-Transport-Security": [ "max-age=31536000; includeSubDomains" @@ -57,7 +57,7 @@ "nosniff" ], "Content-Length": [ - "3119" + "3157" ], "Content-Type": [ "application/json; charset=utf-8" @@ -66,8 +66,8 @@ "-1" ] }, - "ResponseBody": "{\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/ResourceGroup-CUS/providers/Microsoft.Security/IoTSecuritySolutions/IotHub-CUS\",\r\n \"name\": \"IotHub-CUS\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"IotHub-CUS-LogAnalytics-CUS\",\r\n \"status\": \"Enabled\",\r\n \"export\": [],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.operationalinsights/workspaces/loganalytics-cus\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where name contains \\\"v2\\\"\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ]\r\n },\r\n \"tags\": {}\r\n}", - "StatusCode": 201 + "ResponseBody": "{\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/ResourceGroup-CUS/providers/Microsoft.Security/IoTSecuritySolutions/IotHub-CUS\",\r\n \"name\": \"IotHub-CUS\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"IotHub-CUS-LogAnalytics-CUS\",\r\n \"status\": \"Enabled\",\r\n \"export\": [],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.operationalinsights/workspaces/loganalytics-cus\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where name contains \\\"v2\\\"\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Disabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n}", + "StatusCode": 200 } ], "Names": {}, diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_Delete.json b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_Delete.json index fb1e180de646..5febc67722db 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_Delete.json +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_Delete.json @@ -7,7 +7,7 @@ "RequestBody": "", "RequestHeaders": { "x-ms-client-request-id": [ - "27ca7b39-fa5a-45c9-ae4c-e4ea3a8013a6" + "f4cb3a60-f02b-48da-9c28-e3c4633fcb1f" ], "accept-language": [ "en-US" @@ -15,8 +15,8 @@ "User-Agent": [ "FxVersion/4.6.26614.01", "OSName/Windows", - "OSVersion/Microsoft.Windows.10.0.18362.", - "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.0.0" + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.1.0" ] }, "ResponseHeaders": { @@ -24,7 +24,7 @@ "no-cache" ], "Date": [ - "Sun, 15 Sep 2019 09:12:29 GMT" + "Thu, 07 Nov 2019 14:21:31 GMT" ], "Pragma": [ "no-cache" @@ -37,13 +37,13 @@ "749" ], "x-ms-request-id": [ - "b3d5f7a4-5250-4eba-83a6-8eac9595433d" + "b15d79b1-f4ec-4765-980e-ef15eae2f803" ], "x-ms-correlation-request-id": [ - "b3d5f7a4-5250-4eba-83a6-8eac9595433d" + "b15d79b1-f4ec-4765-980e-ef15eae2f803" ], "x-ms-routing-request-id": [ - "UKSOUTH2:20190915T091229Z:b3d5f7a4-5250-4eba-83a6-8eac9595433d" + "UKSOUTH2:20191107T142131Z:b15d79b1-f4ec-4765-980e-ef15eae2f803" ], "Strict-Transport-Security": [ "max-age=31536000; includeSubDomains" @@ -52,7 +52,7 @@ "nosniff" ], "Content-Length": [ - "3132" + "3169" ], "Content-Type": [ "application/json; charset=utf-8" @@ -61,7 +61,7 @@ "-1" ] }, - "ResponseBody": "{\r\n \"value\": [\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/iothub-cus\",\r\n \"name\": \"iothub-cus\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"IotHub-CUS-LogAnalytics-CUS\",\r\n \"status\": \"Enabled\",\r\n \"export\": [],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.operationalinsights/workspaces/loganalytics-cus\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where name contains \\\"v2\\\"\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Disabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ]\r\n },\r\n \"tags\": {}\r\n }\r\n ]\r\n}", + "ResponseBody": "{\r\n \"value\": [\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/iothub-cus\",\r\n \"name\": \"iothub-cus\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"IotHub-CUS-LogAnalytics-CUS\",\r\n \"status\": \"Enabled\",\r\n \"export\": [],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.operationalinsights/workspaces/loganalytics-cus\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where name contains \\\"v2\\\"\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Disabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n }\r\n ]\r\n}", "StatusCode": 200 }, { @@ -71,7 +71,7 @@ "RequestBody": "", "RequestHeaders": { "x-ms-client-request-id": [ - "40859f48-6669-4303-8929-e9b0c09188ee" + "ac85dc5c-62fe-4109-8fc7-1a858b762226" ], "accept-language": [ "en-US" @@ -79,8 +79,8 @@ "User-Agent": [ "FxVersion/4.6.26614.01", "OSName/Windows", - "OSVersion/Microsoft.Windows.10.0.18362.", - "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.0.0" + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.1.0" ] }, "ResponseHeaders": { @@ -88,7 +88,7 @@ "no-cache" ], "Date": [ - "Sun, 15 Sep 2019 09:12:31 GMT" + "Thu, 07 Nov 2019 14:21:33 GMT" ], "Pragma": [ "no-cache" @@ -100,13 +100,13 @@ "249" ], "x-ms-request-id": [ - "87a52fa1-eff7-46ca-ad6a-1fb33eb510d8" + "52b0a8a2-0c5c-4ead-aaa1-c676fd9c347d" ], "x-ms-correlation-request-id": [ - "87a52fa1-eff7-46ca-ad6a-1fb33eb510d8" + "52b0a8a2-0c5c-4ead-aaa1-c676fd9c347d" ], "x-ms-routing-request-id": [ - "UKSOUTH2:20190915T091232Z:87a52fa1-eff7-46ca-ad6a-1fb33eb510d8" + "UKSOUTH2:20191107T142133Z:52b0a8a2-0c5c-4ead-aaa1-c676fd9c347d" ], "Strict-Transport-Security": [ "max-age=31536000; includeSubDomains" diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_Get.json b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_Get.json index b1bbce85b07c..7fc3bb9e8d3d 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_Get.json +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_Get.json @@ -7,7 +7,7 @@ "RequestBody": "", "RequestHeaders": { "x-ms-client-request-id": [ - "63fef52b-b964-41c0-802e-305e460630d8" + "18ff0e60-e7b3-497c-9306-3d099ad323c0" ], "accept-language": [ "en-US" @@ -15,8 +15,8 @@ "User-Agent": [ "FxVersion/4.6.26614.01", "OSName/Windows", - "OSVersion/Microsoft.Windows.10.0.18362.", - "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.0.0" + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.1.0" ] }, "ResponseHeaders": { @@ -24,7 +24,7 @@ "no-cache" ], "Date": [ - "Sun, 15 Sep 2019 09:10:03 GMT" + "Thu, 07 Nov 2019 14:20:42 GMT" ], "Pragma": [ "no-cache" @@ -36,13 +36,13 @@ "749" ], "x-ms-request-id": [ - "5c06b27b-b15a-44bf-b465-2b21e76a0f26" + "c05a201a-dc97-4b28-8086-4aac42d8cf87" ], "x-ms-correlation-request-id": [ - "5c06b27b-b15a-44bf-b465-2b21e76a0f26" + "c05a201a-dc97-4b28-8086-4aac42d8cf87" ], "x-ms-routing-request-id": [ - "UKSOUTH2:20190915T091004Z:5c06b27b-b15a-44bf-b465-2b21e76a0f26" + "UKSOUTH2:20191107T142042Z:c05a201a-dc97-4b28-8086-4aac42d8cf87" ], "Strict-Transport-Security": [ "max-age=31536000; includeSubDomains" @@ -51,7 +51,7 @@ "nosniff" ], "Content-Length": [ - "3120" + "3157" ], "Content-Type": [ "application/json; charset=utf-8" @@ -60,10 +60,10 @@ "-1" ] }, - "ResponseBody": "{\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/ResourceGroup-CUS/providers/Microsoft.Security/IoTSecuritySolutions/IotHub-CUS\",\r\n \"name\": \"IotHub-CUS\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"IotHub-CUS-LogAnalytics-CUS\",\r\n \"status\": \"Enabled\",\r\n \"export\": [],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.operationalinsights/workspaces/loganalytics-cus\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where name contains \\\"v2\\\"\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Disabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ]\r\n },\r\n \"tags\": {}\r\n}", + "ResponseBody": "{\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/ResourceGroup-CUS/providers/Microsoft.Security/IoTSecuritySolutions/IotHub-CUS\",\r\n \"name\": \"IotHub-CUS\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"IotHub-CUS-LogAnalytics-CUS\",\r\n \"status\": \"Enabled\",\r\n \"export\": [],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.operationalinsights/workspaces/loganalytics-cus\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where name contains \\\"v2\\\"\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Disabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n}", "StatusCode": 200 } ], "Names": {}, - "Variables": { "SubscriptionId": "075423e9-7d33-4166-8bdf-3920b04e3735" } + "Variables": {} } \ No newline at end of file diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_ListByResourceGroup.json b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_ListByResourceGroup.json index fe933bc978f3..f782ffb7ab7b 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_ListByResourceGroup.json +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_ListByResourceGroup.json @@ -7,7 +7,7 @@ "RequestBody": "", "RequestHeaders": { "x-ms-client-request-id": [ - "d4c2b8d3-52bc-4e4b-85b4-60f7c0542455" + "4ea6477a-8047-42ab-baf7-244f9d07478a" ], "accept-language": [ "en-US" @@ -15,8 +15,8 @@ "User-Agent": [ "FxVersion/4.6.26614.01", "OSName/Windows", - "OSVersion/Microsoft.Windows.10.0.18362.", - "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.0.0" + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.1.0" ] }, "ResponseHeaders": { @@ -24,7 +24,7 @@ "no-cache" ], "Date": [ - "Sun, 15 Sep 2019 09:10:02 GMT" + "Thu, 07 Nov 2019 14:20:40 GMT" ], "Pragma": [ "no-cache" @@ -37,13 +37,13 @@ "749" ], "x-ms-request-id": [ - "9b9e9aba-07dc-4ed8-8a8d-1f695e58bf72" + "cdc5edc1-473f-49c1-b1b7-33680466fb60" ], "x-ms-correlation-request-id": [ - "9b9e9aba-07dc-4ed8-8a8d-1f695e58bf72" + "cdc5edc1-473f-49c1-b1b7-33680466fb60" ], "x-ms-routing-request-id": [ - "UKSOUTH2:20190915T091003Z:9b9e9aba-07dc-4ed8-8a8d-1f695e58bf72" + "UKSOUTH2:20191107T142041Z:cdc5edc1-473f-49c1-b1b7-33680466fb60" ], "Strict-Transport-Security": [ "max-age=31536000; includeSubDomains" @@ -52,7 +52,7 @@ "nosniff" ], "Content-Length": [ - "3132" + "3169" ], "Content-Type": [ "application/json; charset=utf-8" @@ -61,10 +61,10 @@ "-1" ] }, - "ResponseBody": "{\r\n \"value\": [\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/iothub-cus\",\r\n \"name\": \"iothub-cus\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"IotHub-CUS-LogAnalytics-CUS\",\r\n \"status\": \"Enabled\",\r\n \"export\": [],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.operationalinsights/workspaces/loganalytics-cus\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where name contains \\\"v2\\\"\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Disabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ]\r\n },\r\n \"tags\": {}\r\n }\r\n ]\r\n}", + "ResponseBody": "{\r\n \"value\": [\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/iothub-cus\",\r\n \"name\": \"iothub-cus\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"IotHub-CUS-LogAnalytics-CUS\",\r\n \"status\": \"Enabled\",\r\n \"export\": [],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.operationalinsights/workspaces/loganalytics-cus\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where name contains \\\"v2\\\"\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Disabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n }\r\n ]\r\n}", "StatusCode": 200 } ], "Names": {}, - "Variables": { "SubscriptionId": "075423e9-7d33-4166-8bdf-3920b04e3735" } + "Variables": {} } \ No newline at end of file diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_ListBySubscription.json b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_ListBySubscription.json index 3b50673d4c74..002659822090 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_ListBySubscription.json +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_ListBySubscription.json @@ -7,7 +7,7 @@ "RequestBody": "", "RequestHeaders": { "x-ms-client-request-id": [ - "784236dc-e14e-4869-aeae-1cadef5be782" + "7d98d8ab-21b9-415b-bec8-4acd8bdc522e" ], "accept-language": [ "en-US" @@ -15,8 +15,8 @@ "User-Agent": [ "FxVersion/4.6.26614.01", "OSName/Windows", - "OSVersion/Microsoft.Windows.10.0.18362.", - "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.0.0" + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.1.0" ] }, "ResponseHeaders": { @@ -24,7 +24,7 @@ "no-cache" ], "Date": [ - "Sun, 15 Sep 2019 09:09:59 GMT" + "Thu, 07 Nov 2019 14:20:40 GMT" ], "Pragma": [ "no-cache" @@ -38,13 +38,13 @@ "749" ], "x-ms-request-id": [ - "091ac49b-0655-4575-bcbc-369530f6fd45" + "2b556d79-9461-493c-bd47-956e09f0b683" ], "x-ms-correlation-request-id": [ - "091ac49b-0655-4575-bcbc-369530f6fd45" + "2b556d79-9461-493c-bd47-956e09f0b683" ], "x-ms-routing-request-id": [ - "UKSOUTH2:20190915T090959Z:091ac49b-0655-4575-bcbc-369530f6fd45" + "UKSOUTH2:20191107T142040Z:2b556d79-9461-493c-bd47-956e09f0b683" ], "Strict-Transport-Security": [ "max-age=31536000; includeSubDomains" @@ -53,7 +53,7 @@ "nosniff" ], "Content-Length": [ - "274194" + "486510" ], "Content-Type": [ "application/json; charset=utf-8" @@ -62,10 +62,10 @@ "-1" ] }, - "ResponseBody": "{\r\n \"value\": [\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/bugbash/providers/Microsoft.Security/IoTSecuritySolutions/bugbashsec\",\r\n \"name\": \"bugbashsec\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"BugBash-security\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/bugbash/providers/microsoft.operationalinsights/workspaces/bugbash-iot-ws\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nir-test/providers/Microsoft.Security/IoTSecuritySolutions/nirtestsolution1\",\r\n \"name\": \"nirtestsolution1\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"NirsSolution\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-nir-test/providers/microsoft.operationalinsights/workspaces/nirtest-north-europe\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {\r\n \"tag1\": \"val1\"\r\n }\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/tibiplayground/providers/Microsoft.Security/IoTSecuritySolutions/tibihub\",\r\n \"name\": \"tibihub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"TibiHub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/tibiplayground/providers/microsoft.operationalinsights/workspaces/tibiworkspace\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nir-test/providers/Microsoft.Security/IoTSecuritySolutions/singahub\",\r\n \"name\": \"singahub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Southeast Asia\",\r\n \"properties\": {\r\n \"displayName\": \"singahub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/b77ec8a9-04ed-48d2-a87a-e5887b978ba6/resourcegroups/iot-solution-demoenv/providers/microsoft.operationalinsights/workspaces/rtogm-loganalytics\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nir-test/providers/microsoft.devices/iothubs/singahub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nir-test/providers/microsoft.devices/iothubs/singahub\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/jonimec/providers/Microsoft.Security/IoTSecuritySolutions/joniiothub\",\r\n \"name\": \"joniiothub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"JoniIotHub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": null,\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michael.e/providers/Microsoft.Security/IoTSecuritySolutions/michael-hub\",\r\n \"name\": \"michael-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"michael-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michael.e/providers/microsoft.operationalinsights/workspaces/michael-ws\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michael.e/providers/microsoft.devices/iothubs/michael-hub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michael.e/providers/microsoft.devices/iothubs/michael-hub\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/drorco-test/providers/Microsoft.Security/IoTSecuritySolutions/drorco-test-hub\",\r\n \"name\": \"drorco-test-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"drorco-test-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/bugbash/providers/microsoft.operationalinsights/workspaces/bugbash-iot-ws\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/hagb-test/providers/Microsoft.Security/IoTSecuritySolutions/hagb-test1\",\r\n \"name\": \"hagb-test1\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"hagb-test1\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/hagb-test1/providers/microsoft.operationalinsights/workspaces/hagb-space\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/galm-iot-hub/providers/Microsoft.Security/IoTSecuritySolutions/galmseatest\",\r\n \"name\": \"galmseatest\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Southeast Asia\",\r\n \"properties\": {\r\n \"displayName\": \"galmseatest\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": null,\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/galm-scuba/providers/Microsoft.Security/IoTSecuritySolutions/galmseatest\",\r\n \"name\": \"galmseatest\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Southeast Asia\",\r\n \"properties\": {\r\n \"displayName\": \"galmseatest\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-nir-test/providers/microsoft.operationalinsights/workspaces/nir-test\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/agent-scuba-integration-hub/providers/Microsoft.Security/IoTSecuritySolutions/guyhub2\",\r\n \"name\": \"guyhub2\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"GuyHub2\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/agent-scuba-integration-hub/providers/microsoft.operationalinsights/workspaces/agent-scuba-integration-workspace\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/agent-integration/providers/Microsoft.Security/IoTSecuritySolutions/kfir-iothub-bugbash2\",\r\n \"name\": \"kfir-iothub-bugbash2\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"kfir-iothub-bugbash2\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": null,\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/winagentperf/providers/Microsoft.Security/IoTSecuritySolutions/perf\",\r\n \"name\": \"perf\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"perf\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/agent-integration/providers/microsoft.operationalinsights/workspaces/agent-integration-ws\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/agent-integration/providers/Microsoft.Security/IoTSecuritySolutions/t-ofdadu-bugbash\",\r\n \"name\": \"t-ofdadu-bugbash\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"t-ofdadu-bugbash\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": null,\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/t-jomecz/providers/Microsoft.Security/IoTSecuritySolutions/jonihub3\",\r\n \"name\": \"jonihub3\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"JoniHub3\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/bugbash/providers/microsoft.operationalinsights/workspaces/bugbash-iot-ws\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/iotedgeresources/providers/Microsoft.Security/IoTSecuritySolutions/t-ofdadu-hub\",\r\n \"name\": \"t-ofdadu-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"t-ofdadu-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": null,\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/release-pipeline-cs/providers/Microsoft.Security/IoTSecuritySolutions/release-pipeline-cs\",\r\n \"name\": \"release-pipeline-cs\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"release-pipeline-cs\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/release-pipeline-cs/providers/microsoft.operationalinsights/workspaces/release-pipeline-cs\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/release-pipeline-cs/providers/microsoft.devices/iothubs/release-pipeline-cs\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/release-pipeline-cs/providers/microsoft.devices/iothubs/release-pipeline-cs\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michaliothub\",\r\n \"name\": \"michaliothub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalIoTHub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace8\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.devices/iothubs/michaliothub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.devices/iothubs/michaliothub\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/amenoch/providers/Microsoft.Security/IoTSecuritySolutions/amit-amit-security\",\r\n \"name\": \"amit-amit-security\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"East US\",\r\n \"properties\": {\r\n \"displayName\": \"amit-amit-security\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amenoch/providers/microsoft.operationalinsights/workspaces/amit-amit-ws\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amenoch/providers/microsoft.devices/iothubs/amit-amit\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amenoch/providers/microsoft.devices/iothubs/amit-amit\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/csharp-linux-northeurope-6/providers/Microsoft.Security/IoTSecuritySolutions/csharp-linux-northeurope-6-s\",\r\n \"name\": \"csharp-linux-northeurope-6-s\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"csharp-linux-northeurope-6-security\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/csharp-linux-northeurope-6/providers/microsoft.operationalinsights/workspaces/csharp-linux-northeurope-6-ws\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/yuvaltestenv-northeurope/providers/Microsoft.Security/IoTSecuritySolutions/yuvaltestenv-northeurope\",\r\n \"name\": \"yuvaltestenv-northeurope\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"YuvalTestEnv-NorthEurope\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/yuvalenv/providers/microsoft.operationalinsights/workspaces/t-yuvalworkspace\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/robencha/providers/Microsoft.Security/IoTSecuritySolutions/bob-hub-us\",\r\n \"name\": \"bob-hub-us\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"bob-hub-us\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/hagb-test1/providers/microsoft.operationalinsights/workspaces/hagb-space\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/robencha/providers/microsoft.devices/iothubs/bob-hub-us\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/robencha/providers/microsoft.devices/iothubs/bob-hub-us\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/t-ofdadu-iotedge/providers/Microsoft.Security/IoTSecuritySolutions/t-ofdadu-hub2\",\r\n \"name\": \"t-ofdadu-hub2\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"t-ofdadu-hub2\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": null,\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/kfir/providers/Microsoft.Security/IoTSecuritySolutions/kfir-northeu\",\r\n \"name\": \"kfir-northeu\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"Kfir-NorthEU\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-nir-test/providers/microsoft.operationalinsights/workspaces/nir-test\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/t-ofdaduarm32/providers/Microsoft.Security/IoTSecuritySolutions/t-ofdadu-pi\",\r\n \"name\": \"t-ofdadu-pi\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"t-ofdadu-PI\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-nir-test/providers/microsoft.operationalinsights/workspaces/nir-test\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/t-ofdaduarm32/providers/Microsoft.Security/IoTSecuritySolutions/ubuntu-arm32\",\r\n \"name\": \"ubuntu-arm32\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"ubuntu-arm32\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-nir-test/providers/microsoft.operationalinsights/workspaces/nir-test\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/t-ofdaduarm32/providers/Microsoft.Security/IoTSecuritySolutions/arm32-hub\",\r\n \"name\": \"arm32-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"arm32-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/t-ofdaduarm32/providers/microsoft.operationalinsights/workspaces/t-ofdadu-test\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/t-ofdaduarm32/providers/microsoft.devices/iothubs/arm32-hub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/t-ofdaduarm32/providers/microsoft.devices/iothubs/arm32-hub\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/amhollan/providers/Microsoft.Security/IoTSecuritySolutions/quickstart-iot-hub\",\r\n \"name\": \"quickstart-iot-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"quickstart-iot-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amhollan/providers/microsoft.operationalinsights/workspaces/amhollan-workspace\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nir-test/providers/Microsoft.Security/IoTSecuritySolutions/tokoyo-hub\",\r\n \"name\": \"tokoyo-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Japan East\",\r\n \"properties\": {\r\n \"displayName\": \"tokoyo-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nir-test/providers/microsoft.operationalinsights/workspaces/nir-bugbash-la\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nir-test/providers/microsoft.devices/iothubs/tokoyo-hub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nir-test/providers/microsoft.devices/iothubs/tokoyo-hub\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/agent-integration/providers/Microsoft.Security/IoTSecuritySolutions/iot-bugbash\",\r\n \"name\": \"iot-bugbash\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"iot-bugbash\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amenoch/providers/microsoft.operationalinsights/workspaces/amenoch-ws\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-bugbash1107/providers/Microsoft.Security/IoTSecuritySolutions/t-ofdadu-hub\",\r\n \"name\": \"t-ofdadu-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"t-ofdadu-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/81de6a21-8799-4bb5-a28c-cbc292f8e023/resourcegroups/rg-iot-bugbash1107/providers/microsoft.operationalinsights/workspaces/t-ofdadu-loganalitics\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/accessibility-demo/providers/Microsoft.Security/IoTSecuritySolutions/accessibility-tests\",\r\n \"name\": \"accessibility-tests\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"accessibility-tests\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michael-bugbash/providers/microsoft.operationalinsights/workspaces/michael-bugbash\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/accessibility-demo/providers/microsoft.devices/iothubs/accessibility-tests\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/accessibility-demo/providers/microsoft.devices/iothubs/accessibility-tests\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-bugbash2207/providers/Microsoft.Security/IoTSecuritySolutions/idperkal-iothub\",\r\n \"name\": \"idperkal-iothub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"East US 2\",\r\n \"properties\": {\r\n \"displayName\": \"idperkal-iothub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-bugbash2207/providers/microsoft.operationalinsights/workspaces/idperkal-log-analytics\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"RG-IoT-Bugbash2207\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/centralindia-resourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/centralindia-hub\",\r\n \"name\": \"centralindia-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central India\",\r\n \"properties\": {\r\n \"displayName\": \"centralindia-Solution\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/test-deployment-in-all-regions/providers/microsoft.operationalinsights/workspaces/test-deployment-in-all-regions\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/centralindia-resourcegroup/providers/microsoft.devices/iothubs/centralindia-hub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/centralindia-resourcegroup/providers/microsoft.devices/iothubs/centralindia-hub\"\r\n ]\r\n },\r\n \"tags\": {\r\n \"tag1\": \"val1\"\r\n }\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/northcentralus-resourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/northcentralus-hub\",\r\n \"name\": \"northcentralus-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Central US\",\r\n \"properties\": {\r\n \"displayName\": \"northcentralus-Solution\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/test-deployment-in-all-regions/providers/microsoft.operationalinsights/workspaces/test-deployment-in-all-regions\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/northcentralus-resourcegroup/providers/microsoft.devices/iothubs/northcentralus-hub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/northcentralus-resourcegroup/providers/microsoft.devices/iothubs/northcentralus-hub\"\r\n ]\r\n },\r\n \"tags\": {\r\n \"tag1\": \"val1\"\r\n }\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-bugbash2207/providers/Microsoft.Security/IoTSecuritySolutions/yoaz-bb-22072019-hub\",\r\n \"name\": \"yoaz-bb-22072019-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"East US\",\r\n \"properties\": {\r\n \"displayName\": \"yoaz-bb-22072019-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-bugbash2207/providers/microsoft.operationalinsights/workspaces/yoaz-workspace-for-hub\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-demo/providers/Microsoft.Security/IoTSecuritySolutions/iot-hub-demo-asc4iot\",\r\n \"name\": \"iot-hub-demo-asc4iot\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"centralus-Solution\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/test-deployment-in-all-regions/providers/microsoft.operationalinsights/workspaces/test-deployment-in-all-regions\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-demo/providers/microsoft.devices/iothubs/iot-hub-demo-asc4iot\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"RG-IoT-Lior\\\")) or (subscriptionId == \\\"81de6a21-8799-4bb5-a28c-cbc292f8e023\\\" and resourceGroup in~ (\\\"AzureBackupRG_northeurope_1\\\",\\\"AzureIoT-hub\\\",\\\"RG-Lior-Hub\\\")) or (subscriptionId == \\\"b77ec8a9-04ed-48d2-a87a-e5887b978ba6\\\" and resourceGroup in~ (\\\"IoT-Solution-DemoEnv\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\",\r\n \"81de6a21-8799-4bb5-a28c-cbc292f8e023\",\r\n \"b77ec8a9-04ed-48d2-a87a-e5887b978ba6\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-demo/providers/microsoft.devices/iothubs/iot-hub-demo-asc4iot\"\r\n ]\r\n },\r\n \"tags\": {\r\n \"tag1\": \"val1\"\r\n }\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-demo1/providers/Microsoft.Security/IoTSecuritySolutions/iot-hub-demo-asc4iot1\",\r\n \"name\": \"iot-hub-demo-asc4iot1\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"centralus-Solution\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/test-deployment-in-all-regions/providers/microsoft.operationalinsights/workspaces/test-deployment-in-all-regions\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-demo1/providers/microsoft.devices/iothubs/iot-hub-demo-asc4iot1\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-demo1/providers/microsoft.devices/iothubs/iot-hub-demo-asc4iot1\"\r\n ]\r\n },\r\n \"tags\": {\r\n \"tag1\": \"val1\"\r\n }\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/quicktest/providers/Microsoft.Security/IoTSecuritySolutions/iothub-z5xel\",\r\n \"name\": \"iothub-z5xel\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"iothub-z5xel\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/accessibility-demo/providers/microsoft.operationalinsights/workspaces/delete-me-plz\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/quicktest/providers/microsoft.devices/iothubs/iothub-z5xel\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/quicktest/providers/microsoft.devices/iothubs/iothub-z5xel\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/liran-temp/providers/Microsoft.Security/IoTSecuritySolutions/autodiscoveredhub\",\r\n \"name\": \"autodiscoveredhub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"autodiscoveredhub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/tibiplayground/providers/microsoft.operationalinsights/workspaces/tibiworkspace\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/liran-temp/providers/microsoft.devices/iothubs/autodiscoveredhub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/liran-temp/providers/microsoft.devices/iothubs/autodiscoveredhub\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/danielkrigerPPtrial/providers/microsoft.eventhub/namespaces/eventHub\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nir-test/providers/microsoft.servicebus/namespaces/serviceBusQueue\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/galm-iot-hub/providers/microsoft.servicebus/namespaces/serviceBusTopic\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/securitydata/providers/microsoft.storage/storageaccounts/storage\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-demo-test-git/providers/Microsoft.Security/IoTSecuritySolutions/iot-hub-demo-test-git\",\r\n \"name\": \"iot-hub-demo-test-git\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"centralus-Solution\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/test-deployment-in-all-regions/providers/microsoft.operationalinsights/workspaces/test-deployment-in-all-regions\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-demo-test-git/providers/microsoft.devices/iothubs/iot-hub-demo-test-git\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-demo-test-git/providers/microsoft.devices/iothubs/iot-hub-demo-test-git\"\r\n ]\r\n },\r\n \"tags\": {\r\n \"tag1\": \"val1\"\r\n }\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-t-ofdadu-test-script/providers/Microsoft.Security/IoTSecuritySolutions/iot-hub-t-ofdadu-test-script\",\r\n \"name\": \"iot-hub-t-ofdadu-test-script\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"centralus-Solution\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/test-deployment-in-all-regions/providers/microsoft.operationalinsights/workspaces/test-deployment-in-all-regions\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-t-ofdadu-test-script/providers/microsoft.devices/iothubs/iot-hub-t-ofdadu-test-script\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-t-ofdadu-test-script/providers/microsoft.devices/iothubs/iot-hub-t-ofdadu-test-script\"\r\n ]\r\n },\r\n \"tags\": {\r\n \"tag1\": \"val1\"\r\n }\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-hub-demo/providers/Microsoft.Security/IoTSecuritySolutions/iot-hub-demo-test-script\",\r\n \"name\": \"iot-hub-demo-test-script\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"centralus-Solution\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/test-deployment-in-all-regions/providers/microsoft.operationalinsights/workspaces/test-deployment-in-all-regions\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-hub-demo/providers/microsoft.devices/iothubs/iot-hub-demo-test-script\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-hub-demo/providers/microsoft.devices/iothubs/iot-hub-demo-test-script\"\r\n ]\r\n },\r\n \"tags\": {\r\n \"tag1\": \"val1\"\r\n }\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/node3-linux-westus/providers/Microsoft.Security/IoTSecuritySolutions/node3-linux-westus-s\",\r\n \"name\": \"node3-linux-westus-s\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"node3-linux-westus-security\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/node3-linux-westus/providers/microsoft.operationalinsights/workspaces/node3-linux-westus-ws\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/node4-linux-westus/providers/Microsoft.Security/IoTSecuritySolutions/node4-linux-westus-s\",\r\n \"name\": \"node4-linux-westus-s\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"node4-linux-westus-security\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/node4-linux-westus/providers/microsoft.operationalinsights/workspaces/node4-linux-westus-ws\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/node4-linux-westus/providers/microsoft.devices/iothubs/node4-linux-westus\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/node4-linux-westus/providers/microsoft.devices/iothubs/node4-linux-westus\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/node4-win-westus/providers/Microsoft.Security/IoTSecuritySolutions/node4-win-westus-s\",\r\n \"name\": \"node4-win-westus-s\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"node4-win-westus-security\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/node4-win-westus/providers/microsoft.operationalinsights/workspaces/node4-win-westus-ws\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/node4-win-westus/providers/microsoft.devices/iothubs/node4-win-westus\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/node4-win-westus/providers/microsoft.devices/iothubs/node4-win-westus\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/matika-rg/providers/Microsoft.Security/IoTSecuritySolutions/matikatest\",\r\n \"name\": \"matikatest\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"MatikaTest\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/matika-rg/providers/microsoft.operationalinsights/workspaces/matikaloganaliticsbugbash\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/matika-rg/providers/microsoft.devices/iothubs/matikatest\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"Matika-RG\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/matika-rg/providers/microsoft.devices/iothubs/matikatest\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michael.e/providers/Microsoft.Security/IoTSecuritySolutions/michael-hub2\",\r\n \"name\": \"michael-hub2\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"michael-hub2\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michael.e/providers/microsoft.operationalinsights/workspaces/michael-ws\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michael.e/providers/microsoft.devices/iothubs/michael-hub2\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"Michael.E\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michael.e/providers/microsoft.devices/iothubs/michael-hub2\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-hub-gal/providers/Microsoft.Security/IoTSecuritySolutions/iot-hub-demo-for-gal\",\r\n \"name\": \"iot-hub-demo-for-gal\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"iot-hub-demo-for-GAL\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/test-deployment-in-all-regions/providers/microsoft.operationalinsights/workspaces/test-deployment-in-all-regions\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"RG-iot-hub-GAL\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-asc-for-iot-demo-ofek/providers/Microsoft.Security/IoTSecuritySolutions/asc-for-iot-hub-ofek\",\r\n \"name\": \"asc-for-iot-hub-ofek\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"East US\",\r\n \"properties\": {\r\n \"displayName\": \"eastus-Solution\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/test-deployment-in-all-regions/providers/microsoft.operationalinsights/workspaces/test-deployment-in-all-regions\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-asc-for-iot-demo-ofek/providers/microsoft.devices/iothubs/asc-for-iot-hub-ofek\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"RG-ASC-for-iot-Demo-Ofek\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-asc-for-iot-demo-ofek/providers/microsoft.devices/iothubs/asc-for-iot-hub-ofek\"\r\n ]\r\n },\r\n \"tags\": {\r\n \"tag1\": \"val1\"\r\n }\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michaliothubtest\",\r\n \"name\": \"michaliothubtest\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalIoTHubTest\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace1\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"MichalResourceGroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-hub-edge/providers/Microsoft.Security/IoTSecuritySolutions/iot-hub-demo-test-edge-v8\",\r\n \"name\": \"iot-hub-demo-test-edge-v8\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"iot-hub-demo-test-edge-v8\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/test-deployment-in-all-regions/providers/microsoft.operationalinsights/workspaces/test-deployment-in-all-regions\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-hub-edge/providers/microsoft.devices/iothubs/iot-hub-demo-test-edge-v8\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"RG-iot-hub-edge\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-hub-edge/providers/microsoft.devices/iothubs/iot-hub-demo-test-edge-v8\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michaliothub3\",\r\n \"name\": \"michaliothub3\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalIoTHub3\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace6\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michaliothub2\",\r\n \"name\": \"michaliothub2\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalIoTHub2\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace5\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michaliothub1\",\r\n \"name\": \"michaliothub1\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalIoTHub1\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace6\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/matika-rg/providers/Microsoft.Security/IoTSecuritySolutions/matikadocs\",\r\n \"name\": \"matikadocs\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"South Central US\",\r\n \"properties\": {\r\n \"displayName\": \"MatikaDocs\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace3\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/matika-rg/providers/microsoft.devices/iothubs/matikadocs\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"Matika-RG\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/matika-rg/providers/microsoft.devices/iothubs/matikadocs\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/agent-integration/providers/Microsoft.Security/IoTSecuritySolutions/lonelyhub\",\r\n \"name\": \"lonelyhub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"East US\",\r\n \"properties\": {\r\n \"displayName\": \"lonelyhub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace3\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/agent-integration/providers/microsoft.devices/iothubs/lonelyhub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"Agent-Integration\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/agent-integration/providers/microsoft.devices/iothubs/lonelyhub\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/matika-rg/providers/Microsoft.Security/IoTSecuritySolutions/keren\",\r\n \"name\": \"keren\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"Keren\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace3\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/matika-rg/providers/microsoft.devices/iothubs/keren\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"Matika-RG\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/matika-rg/providers/microsoft.devices/iothubs/keren\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/iot-hub-demo/providers/Microsoft.Security/IoTSecuritySolutions/iothub-oyywp\",\r\n \"name\": \"iothub-oyywp\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"iothub-oyywp\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace3\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/iot-hub-demo/providers/microsoft.devices/iothubs/iothub-oyywp\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"IoT-Hub-Demo\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/iot-hub-demo/providers/microsoft.devices/iothubs/iothub-oyywp\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/iotedgeresources-japaneast/providers/Microsoft.Security/IoTSecuritySolutions/japaneast-iot-hub\",\r\n \"name\": \"japaneast-iot-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Japan East\",\r\n \"properties\": {\r\n \"displayName\": \"japaneast-iot-Hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace3\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/iotedgeresources-japaneast/providers/microsoft.devices/iothubs/japaneast-iot-hub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"IoTEdgeResources-japaneast\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/iotedgeresources-japaneast/providers/microsoft.devices/iothubs/japaneast-iot-hub\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/agent-scuba-integration-hub/providers/Microsoft.Security/IoTSecuritySolutions/agent-scuba-integration-hub\",\r\n \"name\": \"agent-scuba-integration-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"East US\",\r\n \"properties\": {\r\n \"displayName\": \"agent-scuba-integration-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace3\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/agent-scuba-integration-hub/providers/microsoft.devices/iothubs/agent-scuba-integration-hub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"agent-scuba-integration-hub\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/agent-scuba-integration-hub/providers/microsoft.devices/iothubs/agent-scuba-integration-hub\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michaliothubfortest\",\r\n \"name\": \"michaliothubfortest\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalIoTHubForTest\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace8\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"MichalResourceGroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/iothub-cus\",\r\n \"name\": \"iothub-cus\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"IotHub-CUS-LogAnalytics-CUS\",\r\n \"status\": \"Enabled\",\r\n \"export\": [],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.operationalinsights/workspaces/loganalytics-cus\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where name contains \\\"v2\\\"\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Disabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/bugbash/providers/Microsoft.Security/IoTSecuritySolutions/bugbashsec\",\r\n \"name\": \"bugbashsec\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"BugBash-security\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/bugbash/providers/microsoft.operationalinsights/workspaces/bugbash-iot-ws\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"agent-scuba-integration-hub\\\")) or (subscriptionId == \\\"b77ec8a9-04ed-48d2-a87a-e5887b978ba6\\\" and resourceGroup in~ (\\\"IoT-Solution-DemoEnv\\\",\\\"liran-bugbash\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\",\r\n \"b77ec8a9-04ed-48d2-a87a-e5887b978ba6\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nir-test/providers/Microsoft.Security/IoTSecuritySolutions/nirtestsolution1\",\r\n \"name\": \"nirtestsolution1\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"NirsSolution\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-nir-test/providers/microsoft.operationalinsights/workspaces/nirtest-north-europe\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/danielkrigerpptrial/providers/microsoft.devices/iothubs/danielkrigerpptrialcab51\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/danielkrigerpptrial/providers/microsoft.devices/iothubs/danielkrigerpptrialcab51\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/danielkrigerPPtrial/providers/microsoft.eventhub/namespaces/DeviceNotifications\"\r\n ]\r\n },\r\n \"tags\": {\r\n \"tag1\": \"val1\"\r\n }\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/agent-integration/providers/Microsoft.Security/IoTSecuritySolutions/iot-bugbash\",\r\n \"name\": \"iot-bugbash\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"iot-bugbash\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amenoch/providers/microsoft.operationalinsights/workspaces/amenoch-ws\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/agent-integration/providers/microsoft.devices/iothubs/iot-bugbash\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/agent-integration/providers/microsoft.devices/iothubs/iot-bugbash\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nir-test/providers/Microsoft.Security/IoTSecuritySolutions/bonjour-hub\",\r\n \"name\": \"bonjour-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West Europe\",\r\n \"properties\": {\r\n \"displayName\": \"bonjour-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nir-test/providers/microsoft.operationalinsights/workspaces/nir-bugbash-la\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nir-test/providers/microsoft.devices/iothubs/bonjour-hub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nir-test/providers/microsoft.devices/iothubs/bonjour-hub\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/francecentral-resourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/francecentral-hub\",\r\n \"name\": \"francecentral-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"francecentral\",\r\n \"properties\": {\r\n \"displayName\": \"francecentral-Solution\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/test-deployment-in-all-regions/providers/microsoft.operationalinsights/workspaces/test-deployment-in-all-regions\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/francecentral-resourcegroup/providers/microsoft.devices/iothubs/francecentral-hub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/francecentral-resourcegroup/providers/microsoft.devices/iothubs/francecentral-hub\"\r\n ]\r\n },\r\n \"tags\": {\r\n \"tag1\": \"val1\"\r\n }\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/galm-scuba/providers/Microsoft.Security/IoTSecuritySolutions/galm-iot-hub\",\r\n \"name\": \"galm-iot-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West Europe\",\r\n \"properties\": {\r\n \"displayName\": \"galm-iot-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nir-test/providers/microsoft.operationalinsights/workspaces/nir-bugbash-la\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-scuba/providers/microsoft.devices/iothubs/galm-iot-hub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-scuba/providers/microsoft.devices/iothubs/galm-iot-hub\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/galm-iot-hub/providers/microsoft.eventhub/namespaces/galtest1\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nir-test/providers/microsoft.servicebus/namespaces/galtest\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/galm-iot-hub/providers/microsoft.servicebus/namespaces/galtest3\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/galm-iot-hub/providers/microsoft.storage/storageaccounts/ftdffdtdf\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/yuvalenv/providers/Microsoft.Security/IoTSecuritySolutions/yuvalbugbashnortheurope\",\r\n \"name\": \"yuvalbugbashnortheurope\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"YuvalBugBashNorthEurope\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/yuvalenv/providers/microsoft.operationalinsights/workspaces/yuvallaworkspace\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/yuvalenv/providers/microsoft.devices/iothubs/yuvalbugbashnortheurope\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/yuvalenv/providers/microsoft.devices/iothubs/yuvalbugbashnortheurope\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-francesouth-test/providers/Microsoft.Security/IoTSecuritySolutions/iot-hub-francesouth-test\",\r\n \"name\": \"iot-hub-francesouth-test\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"francecentral\",\r\n \"properties\": {\r\n \"displayName\": \"francecentral-Solution\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/test-deployment-in-all-regions/providers/microsoft.operationalinsights/workspaces/test-deployment-in-all-regions\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-francesouth-test/providers/microsoft.devices/iothubs/iot-hub-francesouth-test\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-francesouth-test/providers/microsoft.devices/iothubs/iot-hub-francesouth-test\"\r\n ]\r\n },\r\n \"tags\": {\r\n \"tag1\": \"val1\"\r\n }\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/csharp-kfir-ukwest-7/providers/Microsoft.Security/IoTSecuritySolutions/csharp-kfir-ukwest-7-s\",\r\n \"name\": \"csharp-kfir-ukwest-7-s\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"ukwest\",\r\n \"properties\": {\r\n \"displayName\": \"csharp-kfir-ukwest-7-security\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/csharp-kfir-ukwest-7/providers/microsoft.operationalinsights/workspaces/csharp-kfir-ukwest-7-ws\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/csharp-kfir-ukwest-7/providers/microsoft.devices/iothubs/csharp-kfir-ukwest-7\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/csharp-kfir-ukwest-7/providers/microsoft.devices/iothubs/csharp-kfir-ukwest-7\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/iotsecdemo0/providers/Microsoft.Security/IoTSecuritySolutions/iotsecdemo0e6b07\",\r\n \"name\": \"iotsecdemo0e6b07\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West Europe\",\r\n \"properties\": {\r\n \"displayName\": \"iotsecdemo0e6b07\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace3\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/iotsecdemo0/providers/microsoft.devices/iothubs/iotsecdemo0e6b07\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"IoTSecDemo0\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/iotsecdemo0/providers/microsoft.devices/iothubs/iotsecdemo0e6b07\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/IoTSecDemo0/providers/microsoft.eventhub/namespaces/DeviceNotifications\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/IoTSecDemo0/providers/microsoft.storage/storageaccounts/shirai\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/IoTSecDemo0/providers/microsoft.storage/storageaccounts/shira_endpoint\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/IoTSecDemo0/providers/microsoft.storage/storageaccounts/AmitEndpoint\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/dkpppredictivemaintanance/providers/Microsoft.Security/IoTSecuritySolutions/dkpppredictivemaintanance188b0\",\r\n \"name\": \"dkpppredictivemaintanance188b0\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"dkpppredictivemaintanance188b0\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace3\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/dkpppredictivemaintanance/providers/microsoft.devices/iothubs/dkpppredictivemaintanance188b0\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"DKPPPredictiveMaintanance\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/dkpppredictivemaintanance/providers/microsoft.devices/iothubs/dkpppredictivemaintanance188b0\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/amhollan/providers/Microsoft.Security/IoTSecuritySolutions/pnp-iot-hub-amhollan\",\r\n \"name\": \"pnp-iot-hub-amhollan\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"pnp-iot-hub-amhollan\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace3\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amhollan/providers/microsoft.devices/iothubs/pnp-iot-hub-amhollan\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"amhollan\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amhollan/providers/microsoft.devices/iothubs/pnp-iot-hub-amhollan\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/robencha/providers/Microsoft.Security/IoTSecuritySolutions/robencha-hub\",\r\n \"name\": \"robencha-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West Europe\",\r\n \"properties\": {\r\n \"displayName\": \"robencha-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace3\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/robencha/providers/microsoft.devices/iothubs/robencha-hub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"robencha\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/robencha/providers/microsoft.devices/iothubs/robencha-hub\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/danielkrigerpptrial/providers/Microsoft.Security/IoTSecuritySolutions/danielkrigerpptrialhub\",\r\n \"name\": \"danielkrigerpptrialhub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"danielkrigerPPtrialHub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace3\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/danielkrigerpptrial/providers/microsoft.devices/iothubs/danielkrigerpptrialhub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"danielkrigerPPtrial\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/danielkrigerpptrial/providers/microsoft.devices/iothubs/danielkrigerpptrialhub\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/galm-iot-hub/providers/microsoft.servicebus/namespaces/securetwinservicebus\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/csharp-linux-centraluseuap-1/providers/Microsoft.Security/IoTSecuritySolutions/csharp-linux-centraluseuap-1-s\",\r\n \"name\": \"csharp-linux-centraluseuap-1-s\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"csharp-linux-centraluseuap-1-security\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/csharp-linux-centraluseuap-1/providers/microsoft.operationalinsights/workspaces/csharp-linux-centraluseuap-1-ws\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/csharp-linux-centraluseuap-2/providers/Microsoft.Security/IoTSecuritySolutions/csharp-linux-centraluseuap-2-s\",\r\n \"name\": \"csharp-linux-centraluseuap-2-s\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"csharp-linux-centraluseuap-2-security\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/csharp-linux-centraluseuap-2/providers/microsoft.operationalinsights/workspaces/csharp-linux-centraluseuap-2-ws\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/galm-scuba/providers/Microsoft.Security/IoTSecuritySolutions/galmseatest2\",\r\n \"name\": \"galmseatest2\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"eastus2euap\",\r\n \"properties\": {\r\n \"displayName\": \"galmseatest\",\r\n \"status\": \"Disabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": null,\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-scuba/providers/microsoft.devices/iothubs/galmseatest\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-scuba/providers/microsoft.devices/iothubs/galmseatest\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nir-test/providers/Microsoft.Security/IoTSecuritySolutions/nir-bugbash-1\",\r\n \"name\": \"nir-bugbash-1\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"centraluseuap-Solution\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nir-test/providers/microsoft.operationalinsights/workspaces/nir-bugbash-la\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nir-test/providers/microsoft.devices/iothubs/nir-bugbash-1\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nir-test/providers/microsoft.devices/iothubs/nir-bugbash-1\"\r\n ]\r\n },\r\n \"tags\": {\r\n \"tag1\": \"val1\"\r\n }\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michaliothubbugbash\",\r\n \"name\": \"michaliothubbugbash\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"MichalIoTHubBugBash\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/michalla\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/amhollan/providers/Microsoft.Security/IoTSecuritySolutions/bugbash-iot-hub\",\r\n \"name\": \"bugbash-iot-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"bugbash-iot-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amhollan/providers/microsoft.operationalinsights/workspaces/amhollan-workspace\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"amhollan\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/yuvalenv/providers/Microsoft.Security/IoTSecuritySolutions/yuvalhub\",\r\n \"name\": \"yuvalhub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"YuvalHub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/yuvalenv/providers/microsoft.operationalinsights/workspaces/yuvallaworkspace\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/yuvalenv/providers/microsoft.devices/iothubs/yuvalhub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/yuvalenv/providers/microsoft.devices/iothubs/yuvalhub\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-lior/providers/Microsoft.Security/IoTSecuritySolutions/iot-hub-lior\",\r\n \"name\": \"iot-hub-lior\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"IoT-Hub-Lior\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-lior/providers/microsoft.operationalinsights/workspaces/ws-iot-lior\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/drorco-test/providers/Microsoft.Security/IoTSecuritySolutions/iothub-drorco-bb1\",\r\n \"name\": \"iothub-drorco-bb1\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"iothub-drorco-bb1\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/drorco-test/providers/microsoft.operationalinsights/workspaces/la-drorco-bugbash\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/hagb-test-canary/providers/Microsoft.Security/IoTSecuritySolutions/hagb-test-canary\",\r\n \"name\": \"hagb-test-canary\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"hagb-test-canary\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/hagb-test-canary/providers/microsoft.operationalinsights/workspaces/hagb-test-canary\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/bugbash/providers/Microsoft.Security/IoTSecuritySolutions/kfir-cuseuap\",\r\n \"name\": \"kfir-cuseuap\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"kfir-CUSEUAP\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/bugbash/providers/microsoft.operationalinsights/workspaces/kfir-cuseuap\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/matika-rg/providers/Microsoft.Security/IoTSecuritySolutions/matikas-hub\",\r\n \"name\": \"matikas-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"Matikas-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/matika-rg/providers/microsoft.operationalinsights/workspaces/matikaloganalitics\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/amhollan/providers/Microsoft.Security/IoTSecuritySolutions/amhollan-iot-hub-dev\",\r\n \"name\": \"amhollan-iot-hub-dev\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"amhollan-iot-hub-dev\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amhollan/providers/microsoft.operationalinsights/workspaces/amhollan-log-analytics-workspace\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amhollan/providers/microsoft.devices/iothubs/amhollan-iot-hub-dev\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amhollan/providers/microsoft.devices/iothubs/amhollan-iot-hub-dev\"\r\n ]\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/amenoch/providers/Microsoft.Security/IoTSecuritySolutions/bbs\",\r\n \"name\": \"bbs\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"bbs\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amenoch/providers/microsoft.operationalinsights/workspaces/amenoch-ws\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"amenoch\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/idperkal-playground/providers/Microsoft.Security/IoTSecuritySolutions/idperkal-iothub\",\r\n \"name\": \"idperkal-iothub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"idperkal-iothub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/idperkal-playground/providers/microsoft.operationalinsights/workspaces/idperkal-log-analytic\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"quickstart\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": []\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/canary-validation/providers/Microsoft.Security/IoTSecuritySolutions/canary-validation-iothub\",\r\n \"name\": \"canary-validation-iothub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"canary-validation-iothub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace3\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/canary-validation/providers/microsoft.devices/iothubs/canary-validation-iothub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"canary-validation\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/canary-validation/providers/microsoft.devices/iothubs/canary-validation-iothub\"\r\n ]\r\n },\r\n \"tags\": {}\r\n }\r\n ]\r\n}", + "ResponseBody": "{\r\n \"value\": [\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/bugbash/providers/Microsoft.Security/IoTSecuritySolutions/bugbashsec\",\r\n \"name\": \"bugbashsec\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"BugBash-security\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/bugbash/providers/microsoft.operationalinsights/workspaces/bugbash-iot-ws\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nir-test/providers/Microsoft.Security/IoTSecuritySolutions/nirtestsolution1\",\r\n \"name\": \"nirtestsolution1\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"NirsSolution\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-nir-test/providers/microsoft.operationalinsights/workspaces/nirtest-north-europe\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {\r\n \"tag1\": \"val1\"\r\n }\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/tibiplayground/providers/Microsoft.Security/IoTSecuritySolutions/tibihub\",\r\n \"name\": \"tibihub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"TibiHub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/tibiplayground/providers/microsoft.operationalinsights/workspaces/tibiworkspace\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nir-test/providers/Microsoft.Security/IoTSecuritySolutions/singahub\",\r\n \"name\": \"singahub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Southeast Asia\",\r\n \"properties\": {\r\n \"displayName\": \"singahub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nir-test/providers/microsoft.devices/iothubs/singahub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nir-test/providers/microsoft.devices/iothubs/singahub\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/jonimec/providers/Microsoft.Security/IoTSecuritySolutions/joniiothub\",\r\n \"name\": \"joniiothub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"JoniIotHub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": null,\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michael.e/providers/Microsoft.Security/IoTSecuritySolutions/michael-hub\",\r\n \"name\": \"michael-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"michael-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michael.e/providers/microsoft.devices/iothubs/michael-hub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michael.e/providers/microsoft.devices/iothubs/michael-hub\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/drorco-test/providers/Microsoft.Security/IoTSecuritySolutions/drorco-test-hub\",\r\n \"name\": \"drorco-test-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"drorco-test-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/bugbash/providers/microsoft.operationalinsights/workspaces/bugbash-iot-ws\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/hagb-test/providers/Microsoft.Security/IoTSecuritySolutions/hagb-test1\",\r\n \"name\": \"hagb-test1\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"hagb-test1\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/hagb-test1/providers/microsoft.operationalinsights/workspaces/hagb-space\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/galm-iot-hub/providers/Microsoft.Security/IoTSecuritySolutions/galmseatest\",\r\n \"name\": \"galmseatest\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Southeast Asia\",\r\n \"properties\": {\r\n \"displayName\": \"galmseatest\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": null,\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/galm-scuba/providers/Microsoft.Security/IoTSecuritySolutions/galmseatest\",\r\n \"name\": \"galmseatest\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Southeast Asia\",\r\n \"properties\": {\r\n \"displayName\": \"galmseatest\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-nir-test/providers/microsoft.operationalinsights/workspaces/nir-test\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/agent-scuba-integration-hub/providers/Microsoft.Security/IoTSecuritySolutions/guyhub2\",\r\n \"name\": \"guyhub2\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"GuyHub2\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/agent-scuba-integration-hub/providers/microsoft.operationalinsights/workspaces/agent-scuba-integration-workspace\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/agent-integration/providers/Microsoft.Security/IoTSecuritySolutions/kfir-iothub-bugbash2\",\r\n \"name\": \"kfir-iothub-bugbash2\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"kfir-iothub-bugbash2\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": null,\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/winagentperf/providers/Microsoft.Security/IoTSecuritySolutions/perf\",\r\n \"name\": \"perf\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"perf\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/agent-integration/providers/microsoft.operationalinsights/workspaces/agent-integration-ws\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/agent-integration/providers/Microsoft.Security/IoTSecuritySolutions/t-ofdadu-bugbash\",\r\n \"name\": \"t-ofdadu-bugbash\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"t-ofdadu-bugbash\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": null,\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/t-jomecz/providers/Microsoft.Security/IoTSecuritySolutions/jonihub3\",\r\n \"name\": \"jonihub3\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"JoniHub3\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/bugbash/providers/microsoft.operationalinsights/workspaces/bugbash-iot-ws\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/iotedgeresources/providers/Microsoft.Security/IoTSecuritySolutions/t-ofdadu-hub\",\r\n \"name\": \"t-ofdadu-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"t-ofdadu-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": null,\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/release-pipeline-cs/providers/Microsoft.Security/IoTSecuritySolutions/release-pipeline-cs\",\r\n \"name\": \"release-pipeline-cs\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"release-pipeline-cs\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/release-pipeline-cs/providers/microsoft.devices/iothubs/release-pipeline-cs\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/release-pipeline-cs/providers/microsoft.devices/iothubs/release-pipeline-cs\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michaliothub\",\r\n \"name\": \"michaliothub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalIoTHub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace8\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/amenoch/providers/Microsoft.Security/IoTSecuritySolutions/amit-amit-security\",\r\n \"name\": \"amit-amit-security\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"East US\",\r\n \"properties\": {\r\n \"displayName\": \"amit-amit-security\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amenoch/providers/microsoft.operationalinsights/workspaces/amit-amit-ws\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amenoch/providers/microsoft.devices/iothubs/amit-amit\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amenoch/providers/microsoft.devices/iothubs/amit-amit\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/csharp-linux-northeurope-6/providers/Microsoft.Security/IoTSecuritySolutions/csharp-linux-northeurope-6-s\",\r\n \"name\": \"csharp-linux-northeurope-6-s\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"csharp-linux-northeurope-6-security\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/csharp-linux-northeurope-6/providers/microsoft.operationalinsights/workspaces/csharp-linux-northeurope-6-ws\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/yuvaltestenv-northeurope/providers/Microsoft.Security/IoTSecuritySolutions/yuvaltestenv-northeurope\",\r\n \"name\": \"yuvaltestenv-northeurope\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"YuvalTestEnv-NorthEurope\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/yuvalenv/providers/microsoft.operationalinsights/workspaces/t-yuvalworkspace\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/robencha/providers/Microsoft.Security/IoTSecuritySolutions/bob-hub-us\",\r\n \"name\": \"bob-hub-us\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"bob-hub-us\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/robencha/providers/microsoft.devices/iothubs/bob-hub-us\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/robencha/providers/microsoft.devices/iothubs/bob-hub-us\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/t-ofdadu-iotedge/providers/Microsoft.Security/IoTSecuritySolutions/t-ofdadu-hub2\",\r\n \"name\": \"t-ofdadu-hub2\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"t-ofdadu-hub2\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": null,\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/kfir/providers/Microsoft.Security/IoTSecuritySolutions/kfir-northeu\",\r\n \"name\": \"kfir-northeu\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"Kfir-NorthEU\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-nir-test/providers/microsoft.operationalinsights/workspaces/nir-test\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/t-ofdaduarm32/providers/Microsoft.Security/IoTSecuritySolutions/t-ofdadu-pi\",\r\n \"name\": \"t-ofdadu-pi\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"t-ofdadu-PI\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-nir-test/providers/microsoft.operationalinsights/workspaces/nir-test\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/t-ofdaduarm32/providers/Microsoft.Security/IoTSecuritySolutions/ubuntu-arm32\",\r\n \"name\": \"ubuntu-arm32\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"ubuntu-arm32\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-nir-test/providers/microsoft.operationalinsights/workspaces/nir-test\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/t-ofdaduarm32/providers/Microsoft.Security/IoTSecuritySolutions/arm32-hub\",\r\n \"name\": \"arm32-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"arm32-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/t-ofdaduarm32/providers/microsoft.operationalinsights/workspaces/t-ofdadu-test\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/t-ofdaduarm32/providers/microsoft.devices/iothubs/arm32-hub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/t-ofdaduarm32/providers/microsoft.devices/iothubs/arm32-hub\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/amhollan/providers/Microsoft.Security/IoTSecuritySolutions/quickstart-iot-hub\",\r\n \"name\": \"quickstart-iot-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"quickstart-iot-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amhollan/providers/microsoft.operationalinsights/workspaces/amhollan-workspace\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nir-test/providers/Microsoft.Security/IoTSecuritySolutions/tokoyo-hub\",\r\n \"name\": \"tokoyo-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Japan East\",\r\n \"properties\": {\r\n \"displayName\": \"tokoyo-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nir-test/providers/microsoft.devices/iothubs/tokoyo-hub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nir-test/providers/microsoft.devices/iothubs/tokoyo-hub\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/agent-integration/providers/Microsoft.Security/IoTSecuritySolutions/iot-bugbash\",\r\n \"name\": \"iot-bugbash\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"iot-bugbash\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amenoch/providers/microsoft.operationalinsights/workspaces/amenoch-ws\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-bugbash1107/providers/Microsoft.Security/IoTSecuritySolutions/t-ofdadu-hub\",\r\n \"name\": \"t-ofdadu-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"t-ofdadu-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/81de6a21-8799-4bb5-a28c-cbc292f8e023/resourcegroups/rg-iot-bugbash1107/providers/microsoft.operationalinsights/workspaces/t-ofdadu-loganalitics\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/accessibility-demo/providers/Microsoft.Security/IoTSecuritySolutions/accessibility-tests\",\r\n \"name\": \"accessibility-tests\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"accessibility-tests\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-bugbash2207/providers/Microsoft.Security/IoTSecuritySolutions/idperkal-iothub\",\r\n \"name\": \"idperkal-iothub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"East US 2\",\r\n \"properties\": {\r\n \"displayName\": \"idperkal-iothub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-bugbash2207/providers/microsoft.operationalinsights/workspaces/idperkal-log-analytics\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"RG-IoT-Bugbash2207\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/centralindia-resourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/centralindia-hub\",\r\n \"name\": \"centralindia-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central India\",\r\n \"properties\": {\r\n \"displayName\": \"centralindia-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/centralindia-resourcegroup/providers/microsoft.devices/iothubs/centralindia-hub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/centralindia-resourcegroup/providers/microsoft.devices/iothubs/centralindia-hub\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/northcentralus-resourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/northcentralus-hub\",\r\n \"name\": \"northcentralus-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Central US\",\r\n \"properties\": {\r\n \"displayName\": \"northcentralus-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/northcentralus-resourcegroup/providers/microsoft.devices/iothubs/northcentralus-hub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/northcentralus-resourcegroup/providers/microsoft.devices/iothubs/northcentralus-hub\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-bugbash2207/providers/Microsoft.Security/IoTSecuritySolutions/yoaz-bb-22072019-hub\",\r\n \"name\": \"yoaz-bb-22072019-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"East US\",\r\n \"properties\": {\r\n \"displayName\": \"yoaz-bb-22072019-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-bugbash2207/providers/microsoft.operationalinsights/workspaces/yoaz-workspace-for-hub\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-demo/providers/Microsoft.Security/IoTSecuritySolutions/iot-hub-demo-asc4iot\",\r\n \"name\": \"iot-hub-demo-asc4iot\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"IoT-Hub-Demo-ASC4IoT\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-demo/providers/microsoft.devices/iothubs/iot-hub-demo-asc4iot\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"RG-IoT-Lior\\\")) or (subscriptionId == \\\"40dcc8bf-0478-4f3b-b275-ed0a94f2c013\\\" and resourceGroup in~ (\\\"ASIHuntOMSWorkspaceRG\\\")) or (subscriptionId == \\\"81de6a21-8799-4bb5-a28c-cbc292f8e023\\\" and resourceGroup in~ (\\\"AzureIoT-hub\\\",\\\"Lior-Hub-Device-Simulate\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\",\r\n \"40dcc8bf-0478-4f3b-b275-ed0a94f2c013\",\r\n \"81de6a21-8799-4bb5-a28c-cbc292f8e023\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-demo/providers/microsoft.devices/iothubs/iot-hub-demo-asc4iot\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-demo1/providers/Microsoft.Security/IoTSecuritySolutions/iot-hub-demo-asc4iot1\",\r\n \"name\": \"iot-hub-demo-asc4iot1\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"IoT-Hub-Demo-ASC4IoT1\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-demo1/providers/microsoft.devices/iothubs/iot-hub-demo-asc4iot1\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-demo1/providers/microsoft.devices/iothubs/iot-hub-demo-asc4iot1\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/quicktest/providers/Microsoft.Security/IoTSecuritySolutions/iothub-z5xel\",\r\n \"name\": \"iothub-z5xel\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"iothub-z5xel\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/quicktest/providers/microsoft.devices/iothubs/iothub-z5xel\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/quicktest/providers/microsoft.devices/iothubs/iothub-z5xel\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-demo-test-git/providers/Microsoft.Security/IoTSecuritySolutions/iot-hub-demo-test-git\",\r\n \"name\": \"iot-hub-demo-test-git\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"IoT-Hub-Demo-test-git\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-demo-test-git/providers/microsoft.devices/iothubs/iot-hub-demo-test-git\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-demo-test-git/providers/microsoft.devices/iothubs/iot-hub-demo-test-git\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-t-ofdadu-test-script/providers/Microsoft.Security/IoTSecuritySolutions/iot-hub-t-ofdadu-test-script\",\r\n \"name\": \"iot-hub-t-ofdadu-test-script\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"IoT-Hub-t-ofdadu-test-script\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-t-ofdadu-test-script/providers/microsoft.devices/iothubs/iot-hub-t-ofdadu-test-script\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-t-ofdadu-test-script/providers/microsoft.devices/iothubs/iot-hub-t-ofdadu-test-script\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-hub-demo/providers/Microsoft.Security/IoTSecuritySolutions/iot-hub-demo-test-script\",\r\n \"name\": \"iot-hub-demo-test-script\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"iot-hub-demo-test-script\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-hub-demo/providers/microsoft.devices/iothubs/iot-hub-demo-test-script\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-hub-demo/providers/microsoft.devices/iothubs/iot-hub-demo-test-script\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/matika-rg/providers/Microsoft.Security/IoTSecuritySolutions/matikatest\",\r\n \"name\": \"matikatest\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"MatikaTest\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/matika-rg/providers/microsoft.operationalinsights/workspaces/matikaloganaliticsbugbash\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/matika-rg/providers/microsoft.devices/iothubs/matikatest\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"Matika-RG\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/matika-rg/providers/microsoft.devices/iothubs/matikatest\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michael.e/providers/Microsoft.Security/IoTSecuritySolutions/michael-hub2\",\r\n \"name\": \"michael-hub2\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"michael-hub2\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michael.e/providers/microsoft.operationalinsights/workspaces/michael-ws\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michael.e/providers/microsoft.devices/iothubs/michael-hub2\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"Michael.E\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michael.e/providers/microsoft.devices/iothubs/michael-hub2\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-hub-gal/providers/Microsoft.Security/IoTSecuritySolutions/iot-hub-demo-for-gal\",\r\n \"name\": \"iot-hub-demo-for-gal\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"iot-hub-demo-for-GAL\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/test-deployment-in-all-regions/providers/microsoft.operationalinsights/workspaces/test-deployment-in-all-regions\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"RG-iot-hub-GAL\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-asc-for-iot-demo-ofek/providers/Microsoft.Security/IoTSecuritySolutions/asc-for-iot-hub-ofek\",\r\n \"name\": \"asc-for-iot-hub-ofek\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"East US\",\r\n \"properties\": {\r\n \"displayName\": \"ASC-for-iot-hub-Ofek\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-asc-for-iot-demo-ofek/providers/microsoft.devices/iothubs/asc-for-iot-hub-ofek\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-asc-for-iot-demo-ofek/providers/microsoft.devices/iothubs/asc-for-iot-hub-ofek\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michaliothubtest\",\r\n \"name\": \"michaliothubtest\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalIoTHubTest\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace1\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"MichalResourceGroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-hub-edge/providers/Microsoft.Security/IoTSecuritySolutions/iot-hub-demo-test-edge-v8\",\r\n \"name\": \"iot-hub-demo-test-edge-v8\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"iot-hub-demo-test-edge-v8\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-hub-edge/providers/microsoft.devices/iothubs/iot-hub-demo-test-edge-v8\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-hub-edge/providers/microsoft.devices/iothubs/iot-hub-demo-test-edge-v8\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michaliothub3\",\r\n \"name\": \"michaliothub3\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalIoTHub3\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace6\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michaliothub2\",\r\n \"name\": \"michaliothub2\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalIoTHub2\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace5\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michaliothub1\",\r\n \"name\": \"michaliothub1\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalIoTHub1\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace6\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/matika-rg/providers/Microsoft.Security/IoTSecuritySolutions/matikadocs\",\r\n \"name\": \"matikadocs\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"South Central US\",\r\n \"properties\": {\r\n \"displayName\": \"MatikaDocs\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/matika-rg/providers/microsoft.devices/iothubs/matikadocs\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/matika-rg/providers/microsoft.devices/iothubs/matikadocs\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/agent-integration/providers/Microsoft.Security/IoTSecuritySolutions/lonelyhub\",\r\n \"name\": \"lonelyhub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"East US\",\r\n \"properties\": {\r\n \"displayName\": \"lonelyhub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/agent-integration/providers/microsoft.devices/iothubs/lonelyhub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/agent-integration/providers/microsoft.devices/iothubs/lonelyhub\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/matika-rg/providers/Microsoft.Security/IoTSecuritySolutions/keren\",\r\n \"name\": \"keren\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"Keren\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace3\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/matika-rg/providers/microsoft.devices/iothubs/keren\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"Matika-RG\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/matika-rg/providers/microsoft.devices/iothubs/keren\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/iot-hub-demo/providers/Microsoft.Security/IoTSecuritySolutions/iothub-oyywp\",\r\n \"name\": \"iothub-oyywp\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"iothub-oyywp\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/iot-hub-demo/providers/microsoft.devices/iothubs/iothub-oyywp\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/iot-hub-demo/providers/microsoft.devices/iothubs/iothub-oyywp\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/iotedgeresources-japaneast/providers/Microsoft.Security/IoTSecuritySolutions/japaneast-iot-hub\",\r\n \"name\": \"japaneast-iot-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Japan East\",\r\n \"properties\": {\r\n \"displayName\": \"japaneast-iot-Hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/agent-scuba-integration-hub/providers/Microsoft.Security/IoTSecuritySolutions/agent-scuba-integration-hub\",\r\n \"name\": \"agent-scuba-integration-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"East US\",\r\n \"properties\": {\r\n \"displayName\": \"agent-scuba-integration-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace3\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/agent-scuba-integration-hub/providers/microsoft.devices/iothubs/agent-scuba-integration-hub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"agent-scuba-integration-hub\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/agent-scuba-integration-hub/providers/microsoft.devices/iothubs/agent-scuba-integration-hub\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michaliothubfortest\",\r\n \"name\": \"michaliothubfortest\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalIoTHubForTest\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace8\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"MichalResourceGroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michaliothubtest3\",\r\n \"name\": \"michaliothubtest3\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalIoTHubTest3\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace9\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"MichalResourceGroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/etif-rg/providers/Microsoft.Security/IoTSecuritySolutions/etif-iothub\",\r\n \"name\": \"etif-iothub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"East US 2\",\r\n \"properties\": {\r\n \"displayName\": \"Etif-IoTHub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/etif-rg/providers/microsoft.operationalinsights/workspaces/etif-workspace\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"Etif-rg\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michaliothubtest4\",\r\n \"name\": \"michaliothubtest4\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalIoTHubTest4\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/etif-rg/providers/Microsoft.Security/IoTSecuritySolutions/test-eti\",\r\n \"name\": \"test-eti\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"East US 2\",\r\n \"properties\": {\r\n \"displayName\": \"Test-Eti\",\r\n \"status\": \"Disabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": null,\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/etif-rg/providers/microsoft.devices/iothubs/test-eti\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/etif-rg/providers/microsoft.devices/iothubs/test-eti\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubonb2\",\r\n \"name\": \"michalhubonb2\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubOnB2\",\r\n \"status\": \"Enabled\",\r\n \"export\": [],\r\n \"disabledDataSources\": [\r\n \"TwinData\"\r\n ],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace2\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubonb3\",\r\n \"name\": \"michalhubonb3\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubOnB3\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubonb1\",\r\n \"name\": \"michalhubonb1\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubOnB1\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nodejs1-win-westus/providers/Microsoft.Security/IoTSecuritySolutions/nodejs1-win-westus-s\",\r\n \"name\": \"nodejs1-win-westus-s\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"nodejs1-win-westus-security\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nodejs1-win-westus/providers/microsoft.operationalinsights/workspaces/nodejs1-win-westus-ws\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nodejs1-win-westus/providers/microsoft.devices/iothubs/nodejs1-win-westus\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"nodejs1-win-westus\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nodejs1-win-westus/providers/microsoft.devices/iothubs/nodejs1-win-westus\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nodejs1-lin-westus/providers/Microsoft.Security/IoTSecuritySolutions/nodejs1-lin-westus-s\",\r\n \"name\": \"nodejs1-lin-westus-s\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"nodejs1-lin-westus-security\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nodejs1-lin-westus/providers/microsoft.operationalinsights/workspaces/nodejs1-lin-westus-ws\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nodejs1-lin-westus/providers/microsoft.devices/iothubs/nodejs1-lin-westus\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"nodejs1-lin-westus\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nodejs1-lin-westus/providers/microsoft.devices/iothubs/nodejs1-lin-westus\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubonb4\",\r\n \"name\": \"michalhubonb4\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubOnB4\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubonb5\",\r\n \"name\": \"michalhubonb5\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubOnB5\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubonb6\",\r\n \"name\": \"michalhubonb6\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubOnB6\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubonb7\",\r\n \"name\": \"michalhubonb7\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubOnB7\",\r\n \"status\": \"Enabled\",\r\n \"export\": [],\r\n \"disabledDataSources\": [\r\n \"TwinData\"\r\n ],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace2\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubonb8\",\r\n \"name\": \"michalhubonb8\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubOnB8\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubonb9\",\r\n \"name\": \"michalhubonb9\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubOnB9\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubonb10\",\r\n \"name\": \"michalhubonb10\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubOnB10\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubonb11\",\r\n \"name\": \"michalhubonb11\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubOnB11\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubonb12\",\r\n \"name\": \"michalhubonb12\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubOnB12\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubonb13\",\r\n \"name\": \"michalhubonb13\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubOnB13\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubonb14\",\r\n \"name\": \"michalhubonb14\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubOnB14\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubonb15\",\r\n \"name\": \"michalhubonb15\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubOnB15\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubonb16\",\r\n \"name\": \"michalhubonb16\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubOnB16\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubonb17\",\r\n \"name\": \"michalhubonb17\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubOnB17\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubonb18\",\r\n \"name\": \"michalhubonb18\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubOnB18\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"MichalResourceGroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubtest6\",\r\n \"name\": \"michalhubtest6\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubTest6\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/iothubworkspace-westus-1570457741214\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubtest5\",\r\n \"name\": \"michalhubtest5\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubTest5\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/iothubworkspace-westus-1570457741214\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubtest9\",\r\n \"name\": \"michalhubtest9\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Central US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubTest9\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/iothubworkspace-northcentralus-1570482968529\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubtest8\",\r\n \"name\": \"michalhubtest8\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Central US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubTest8\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/iothubworkspace-northcentralus-1570482968531\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubtest10\",\r\n \"name\": \"michalhubtest10\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"canadacentral\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubTest10\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/iothubworkspace-canadacentral-1570482968532\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubtest11\",\r\n \"name\": \"michalhubtest11\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Southeast Asia\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubTest11\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/iothubworkspace-westeurope-1570457741215\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubtest12\",\r\n \"name\": \"michalhubtest12\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Southeast Asia\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubTest12\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/iothubworkspace-westeurope-1570457741215\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubtest16\",\r\n \"name\": \"michalhubtest16\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"koreasouth\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubTest16\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/iothubworkspace-westeurope-1570457741215\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubtest15\",\r\n \"name\": \"michalhubtest15\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"koreasouth\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubTest15\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/iothubworkspace-westeurope-1570457741215\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubtest18\",\r\n \"name\": \"michalhubtest18\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"koreasouth\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubTest18\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/iothubworkspace-westeurope-1570457741215\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubtest20\",\r\n \"name\": \"michalhubtest20\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubTest20\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/iothubworkspace-westus-1570457741214\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubtest25\",\r\n \"name\": \"michalhubtest25\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Japan West\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubTest25\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/iothubworkspace-westeurope-1570457741215\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubtest23\",\r\n \"name\": \"michalhubtest23\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Australia East\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubTest23\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michaele-dev/providers/microsoft.operationalinsights/workspaces/iothubworkspace-australiaeast-1570689223712\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michaele-dev/providers/Microsoft.Security/IoTSecuritySolutions/michalhubtest21\",\r\n \"name\": \"michalhubtest21\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubTest21\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/iothubworkspace-westus-1570457741214\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michaele-dev\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michaele-dev/providers/Microsoft.Security/IoTSecuritySolutions/michalhubtest24\",\r\n \"name\": \"michalhubtest24\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Australia East\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubTest24\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michaele-dev/providers/microsoft.operationalinsights/workspaces/iothubworkspace-australiaeast-1570689223712\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michaele-dev\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubtest30\",\r\n \"name\": \"michalhubtest30\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubTest30\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/iothubworkspace-westus-1570457741214\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michaele-dev/providers/Microsoft.Security/IoTSecuritySolutions/michalhubtest31\",\r\n \"name\": \"michalhubtest31\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubTest31\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/iothubworkspace-westus-1570457741214\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michaele-dev\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-bugbash0610/providers/Microsoft.Security/IoTSecuritySolutions/iotjapan1\",\r\n \"name\": \"iotjapan1\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Japan East\",\r\n \"properties\": {\r\n \"displayName\": \"iotJapan1\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-bugbash0610/providers/microsoft.operationalinsights/workspaces/iothubworkspace-japaneast-1571141801474\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"rg-iot-bugbash0610\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-bugbash0610/providers/Microsoft.Security/IoTSecuritySolutions/iotkorea\",\r\n \"name\": \"iotkorea\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"koreasouth\",\r\n \"properties\": {\r\n \"displayName\": \"iotKorea\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/iothubworkspace-westeurope-1570457741215\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"rg-iot-bugbash0610\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-bugbash0610/providers/Microsoft.Security/IoTSecuritySolutions/iotkoreasouth\",\r\n \"name\": \"iotkoreasouth\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"koreasouth\",\r\n \"properties\": {\r\n \"displayName\": \"iotKoreaSouth\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/iothubworkspace-westeurope-1570457741215\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"rg-iot-bugbash0610\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-bugbash0610/providers/Microsoft.Security/IoTSecuritySolutions/iotjapanwest\",\r\n \"name\": \"iotjapanwest\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Japan West\",\r\n \"properties\": {\r\n \"displayName\": \"iotJapanWest\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/iothubworkspace-westeurope-1570457741215\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"rg-iot-bugbash0610\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-bugbash0610/providers/Microsoft.Security/IoTSecuritySolutions/iotsouthindia\",\r\n \"name\": \"iotsouthindia\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"South India\",\r\n \"properties\": {\r\n \"displayName\": \"iotSouthIndia\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/iothubworkspace-westeurope-1570457741215\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-bugbash0610/providers/microsoft.devices/iothubs/iotsouthindia\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"rg-iot-bugbash0610\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-bugbash0610/providers/microsoft.devices/iothubs/iotsouthindia\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/liran-temp/providers/Microsoft.Security/IoTSecuritySolutions/autodiscoveredhub\",\r\n \"name\": \"autodiscoveredhub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"autodiscoveredhub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/iothubworkspace-westus-1570457741214\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/liran-temp/providers/microsoft.devices/iothubs/autodiscoveredhub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"liran-temp\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/liran-temp/providers/microsoft.devices/iothubs/autodiscoveredhub\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/danielkrigerPPtrial/providers/microsoft.eventhub/namespaces/eventHub\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nir-test/providers/microsoft.servicebus/namespaces/serviceBusQueue\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/galm-iot-hub/providers/microsoft.servicebus/namespaces/serviceBusTopic\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/securitydata/providers/microsoft.storage/storageaccounts/storage\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/accessibility-demo/providers/Microsoft.Security/IoTSecuritySolutions/accessibility-demo\",\r\n \"name\": \"accessibility-demo\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"East US\",\r\n \"properties\": {\r\n \"displayName\": \"accessibility-demo\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/accessibility-demo/providers/microsoft.operationalinsights/workspaces/accessibilitydemo\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/accessibility-demo/providers/microsoft.devices/iothubs/accessibility-demo\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"Accessibility-Demo\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/accessibility-demo/providers/microsoft.devices/iothubs/accessibility-demo\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-ascforiot-overview2/providers/Microsoft.Security/IoTSecuritySolutions/ascforiot-overview2\",\r\n \"name\": \"ascforiot-overview2\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"centralus-Solution\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/test-deployment-in-all-regions/providers/microsoft.operationalinsights/workspaces/test-deployment-in-all-regions\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-ascforiot-overview2/providers/microsoft.devices/iothubs/ascforiot-overview2\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"RG-ASCforIoT-Overview2\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-ascforiot-overview2/providers/microsoft.devices/iothubs/ascforiot-overview2\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {\r\n \"tag1\": \"val1\"\r\n }\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/etif-rg/providers/Microsoft.Security/IoTSecuritySolutions/ignite2019\",\r\n \"name\": \"ignite2019\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West US\",\r\n \"properties\": {\r\n \"displayName\": \"Ignite2019\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/iothubworkspace-westus-1570457741214\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/etif-rg/providers/microsoft.devices/iothubs/ignite2019\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"etif-rg\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/etif-rg/providers/microsoft.devices/iothubs/ignite2019\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/iothub-cus\",\r\n \"name\": \"iothub-cus\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"IotHub-CUS-LogAnalytics-CUS\",\r\n \"status\": \"Enabled\",\r\n \"export\": [],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.operationalinsights/workspaces/loganalytics-cus\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where name contains \\\"v2\\\"\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Disabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/agent-integration/providers/Microsoft.Security/IoTSecuritySolutions/iot-bugbash\",\r\n \"name\": \"iot-bugbash\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"iot-bugbash\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amenoch/providers/microsoft.operationalinsights/workspaces/amenoch-ws\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/agent-integration/providers/microsoft.devices/iothubs/iot-bugbash\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/agent-integration/providers/microsoft.devices/iothubs/iot-bugbash\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/amhollan/providers/Microsoft.Security/IoTSecuritySolutions/pnp-iot-hub-amhollan\",\r\n \"name\": \"pnp-iot-hub-amhollan\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"pnp-iot-hub-amhollan\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace3\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amhollan/providers/microsoft.devices/iothubs/pnp-iot-hub-amhollan\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"amhollan\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amhollan/providers/microsoft.devices/iothubs/pnp-iot-hub-amhollan\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/bugbash/providers/Microsoft.Security/IoTSecuritySolutions/bugbashsec\",\r\n \"name\": \"bugbashsec\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"BugBash-security\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/bugbash/providers/microsoft.operationalinsights/workspaces/bugbash-iot-ws\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"agent-scuba-integration-hub\\\")) or (subscriptionId == \\\"b77ec8a9-04ed-48d2-a87a-e5887b978ba6\\\" and resourceGroup in~ (\\\"IoT-Solution-DemoEnv\\\",\\\"liran-bugbash\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\",\r\n \"b77ec8a9-04ed-48d2-a87a-e5887b978ba6\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/csharp-kfir-ukwest-7/providers/Microsoft.Security/IoTSecuritySolutions/csharp-kfir-ukwest-7-s\",\r\n \"name\": \"csharp-kfir-ukwest-7-s\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"ukwest\",\r\n \"properties\": {\r\n \"displayName\": \"csharp-kfir-ukwest-7-security\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/csharp-kfir-ukwest-7/providers/microsoft.operationalinsights/workspaces/csharp-kfir-ukwest-7-ws\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/csharp-kfir-ukwest-7/providers/microsoft.devices/iothubs/csharp-kfir-ukwest-7\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/csharp-kfir-ukwest-7/providers/microsoft.devices/iothubs/csharp-kfir-ukwest-7\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/danielkrigerpptrial/providers/Microsoft.Security/IoTSecuritySolutions/danielkrigerpptrialhub\",\r\n \"name\": \"danielkrigerpptrialhub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"danielkrigerPPtrialHub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace3\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/danielkrigerpptrial/providers/microsoft.devices/iothubs/danielkrigerpptrialhub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"danielkrigerPPtrial\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/danielkrigerpptrial/providers/microsoft.devices/iothubs/danielkrigerpptrialhub\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/galm-iot-hub/providers/microsoft.servicebus/namespaces/securetwinservicebus\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/dkpppredictivemaintanance/providers/Microsoft.Security/IoTSecuritySolutions/dkpppredictivemaintanance188b0\",\r\n \"name\": \"dkpppredictivemaintanance188b0\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"dkpppredictivemaintanance188b0\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace3\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/dkpppredictivemaintanance/providers/microsoft.devices/iothubs/dkpppredictivemaintanance188b0\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"DKPPPredictiveMaintanance\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/dkpppredictivemaintanance/providers/microsoft.devices/iothubs/dkpppredictivemaintanance188b0\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/francecentral-resourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/francecentral-hub\",\r\n \"name\": \"francecentral-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"francecentral\",\r\n \"properties\": {\r\n \"displayName\": \"francecentral-Solution\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/test-deployment-in-all-regions/providers/microsoft.operationalinsights/workspaces/test-deployment-in-all-regions\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {\r\n \"tag1\": \"val1\"\r\n }\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/galm-scuba/providers/Microsoft.Security/IoTSecuritySolutions/galm-iot-hub\",\r\n \"name\": \"galm-iot-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West Europe\",\r\n \"properties\": {\r\n \"displayName\": \"galm-iot-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-scuba/providers/microsoft.devices/iothubs/galm-iot-hub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-scuba/providers/microsoft.devices/iothubs/galm-iot-hub\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/galm-iot-hub/providers/microsoft.eventhub/namespaces/galtest1\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nir-test/providers/microsoft.servicebus/namespaces/galtest\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/galm-iot-hub/providers/microsoft.servicebus/namespaces/galtest3\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/galm-iot-hub/providers/microsoft.storage/storageaccounts/ftdffdtdf\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/iotsecdemo0/providers/Microsoft.Security/IoTSecuritySolutions/iotsecdemo0e6b07\",\r\n \"name\": \"iotsecdemo0e6b07\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West Europe\",\r\n \"properties\": {\r\n \"displayName\": \"iotsecdemo0e6b07\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/iotsecdemo0/providers/microsoft.devices/iothubs/iotsecdemo0e6b07\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/iotsecdemo0/providers/microsoft.devices/iothubs/iotsecdemo0e6b07\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/IoTSecDemo0/providers/microsoft.eventhub/namespaces/DeviceNotifications\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/IoTSecDemo0/providers/microsoft.storage/storageaccounts/shirai\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/IoTSecDemo0/providers/microsoft.storage/storageaccounts/shira_endpoint\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/IoTSecDemo0/providers/microsoft.storage/storageaccounts/AmitEndpoint\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubtest7\",\r\n \"name\": \"michalhubtest7\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubTest7\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/iothubworkspace-northeurope-1570457875704\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubtest14\",\r\n \"name\": \"michalhubtest14\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"uksouth\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubTest14\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/iothubworkspace-uksouth-1570652161087\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubtest13\",\r\n \"name\": \"michalhubtest13\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"uksouth\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubTest13\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/iothubworkspace-uksouth-1570652161087\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubtest19\",\r\n \"name\": \"michalhubtest19\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"francecentral\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubTest19\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/iothubworkspace-francecentral-1570653967117\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michalhubtest22\",\r\n \"name\": \"michalhubtest22\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"francecentral\",\r\n \"properties\": {\r\n \"displayName\": \"MichalHubTest22\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/iothubworkspace-francecentral-1570653967117\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nir-test/providers/Microsoft.Security/IoTSecuritySolutions/nirtestsolution1\",\r\n \"name\": \"nirtestsolution1\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"NirsSolution\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-nir-test/providers/microsoft.operationalinsights/workspaces/nirtest-north-europe\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/danielkrigerpptrial/providers/microsoft.devices/iothubs/danielkrigerpptrialcab51\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/danielkrigerpptrial/providers/microsoft.devices/iothubs/danielkrigerpptrialcab51\",\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/danielkrigerPPtrial/providers/microsoft.eventhub/namespaces/DeviceNotifications\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {\r\n \"tag1\": \"val1\"\r\n }\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nir-test/providers/Microsoft.Security/IoTSecuritySolutions/bonjour-hub\",\r\n \"name\": \"bonjour-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West Europe\",\r\n \"properties\": {\r\n \"displayName\": \"bonjour-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nir-test/providers/microsoft.devices/iothubs/bonjour-hub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nir-test/providers/microsoft.devices/iothubs/bonjour-hub\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-francesouth-test/providers/Microsoft.Security/IoTSecuritySolutions/iot-hub-francesouth-test\",\r\n \"name\": \"iot-hub-francesouth-test\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"francecentral\",\r\n \"properties\": {\r\n \"displayName\": \"iot-hub-francesouth-test\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-francesouth-test/providers/microsoft.devices/iothubs/iot-hub-francesouth-test\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-francesouth-test/providers/microsoft.devices/iothubs/iot-hub-francesouth-test\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-bugbash0610/providers/Microsoft.Security/IoTSecuritySolutions/iothub44\",\r\n \"name\": \"iothub44\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"ukwest\",\r\n \"properties\": {\r\n \"displayName\": \"iotHub44\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-bugbash0610/providers/microsoft.operationalinsights/workspaces/iothubworkspace-ukwest-1571139370632\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"rg-iot-bugbash0610\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/robencha/providers/Microsoft.Security/IoTSecuritySolutions/robencha-hub\",\r\n \"name\": \"robencha-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"West Europe\",\r\n \"properties\": {\r\n \"displayName\": \"robencha-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/robencha/providers/microsoft.devices/iothubs/robencha-hub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/robencha/providers/microsoft.devices/iothubs/robencha-hub\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/yuvalenv/providers/Microsoft.Security/IoTSecuritySolutions/yuvalbugbashnortheurope\",\r\n \"name\": \"yuvalbugbashnortheurope\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"North Europe\",\r\n \"properties\": {\r\n \"displayName\": \"YuvalBugBashNorthEurope\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace7\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/yuvalenv/providers/microsoft.devices/iothubs/yuvalbugbashnortheurope\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"yuvalenv\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/yuvalenv/providers/microsoft.devices/iothubs/yuvalbugbashnortheurope\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/amenoch/providers/Microsoft.Security/IoTSecuritySolutions/bbs\",\r\n \"name\": \"bbs\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"bbs\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amenoch/providers/microsoft.operationalinsights/workspaces/amenoch-ws\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"amenoch\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/amhollan/providers/Microsoft.Security/IoTSecuritySolutions/bugbash-iot-hub\",\r\n \"name\": \"bugbash-iot-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"bugbash-iot-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amhollan/providers/microsoft.operationalinsights/workspaces/amhollan-workspace\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"amhollan\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/amhollan/providers/Microsoft.Security/IoTSecuritySolutions/amhollan-iot-hub-dev\",\r\n \"name\": \"amhollan-iot-hub-dev\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"amhollan-iot-hub-dev\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amhollan/providers/microsoft.devices/iothubs/amhollan-iot-hub-dev\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amhollan/providers/microsoft.devices/iothubs/amhollan-iot-hub-dev\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/amhollan/providers/Microsoft.Security/IoTSecuritySolutions/amhollanbugbash\",\r\n \"name\": \"amhollanbugbash\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"amhollanbugbash\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/amhollan/providers/microsoft.operationalinsights/workspaces/amhollan-log-analytics-workspace\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"amhollan\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/amhollan/providers/Microsoft.Security/IoTSecuritySolutions/amhollan-attackdemo\",\r\n \"name\": \"amhollan-attackdemo\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"amhollan-attackdemo\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/iothubworkspace-eastus-1570653429405\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"amhollan\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/booth-iot-hub-rg/providers/Microsoft.Security/IoTSecuritySolutions/booth-iot-hub\",\r\n \"name\": \"booth-iot-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"Booth-IoT-Hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-bugbash0610/providers/microsoft.operationalinsights/workspaces/iothubworkspace-eastus-1571240203429\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/booth-iot-hub-rg/providers/microsoft.devices/iothubs/booth-iot-hub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"212f9889-769e-45ae-ab43-6da33674bd26\\\" and resourceGroup in~ (\\\"ASCDEMO\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"212f9889-769e-45ae-ab43-6da33674bd26\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/booth-iot-hub-rg/providers/microsoft.devices/iothubs/booth-iot-hub\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/bugbash/providers/Microsoft.Security/IoTSecuritySolutions/kfir-cuseuap\",\r\n \"name\": \"kfir-cuseuap\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"kfir-CUSEUAP\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/bugbash/providers/microsoft.operationalinsights/workspaces/kfir-cuseuap\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/canary-validation/providers/Microsoft.Security/IoTSecuritySolutions/canary-validation-iothub\",\r\n \"name\": \"canary-validation-iothub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"canary-validation-iothub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace3\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/canary-validation/providers/microsoft.devices/iothubs/canary-validation-iothub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"canary-validation\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/canary-validation/providers/microsoft.devices/iothubs/canary-validation-iothub\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/csharp-linux-centraluseuap-1/providers/Microsoft.Security/IoTSecuritySolutions/csharp-linux-centraluseuap-1-s\",\r\n \"name\": \"csharp-linux-centraluseuap-1-s\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"csharp-linux-centraluseuap-1-security\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/csharp-linux-centraluseuap-1/providers/microsoft.operationalinsights/workspaces/csharp-linux-centraluseuap-1-ws\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/csharp-linux-centraluseuap-2/providers/Microsoft.Security/IoTSecuritySolutions/csharp-linux-centraluseuap-2-s\",\r\n \"name\": \"csharp-linux-centraluseuap-2-s\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"csharp-linux-centraluseuap-2-security\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/csharp-linux-centraluseuap-2/providers/microsoft.operationalinsights/workspaces/csharp-linux-centraluseuap-2-ws\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/drorco-test/providers/Microsoft.Security/IoTSecuritySolutions/iothub-drorco-bb1\",\r\n \"name\": \"iothub-drorco-bb1\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"iothub-drorco-bb1\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/drorco-test/providers/microsoft.operationalinsights/workspaces/la-drorco-bugbash\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/galm-scuba/providers/Microsoft.Security/IoTSecuritySolutions/galmseatest2\",\r\n \"name\": \"galmseatest2\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"eastus2euap\",\r\n \"properties\": {\r\n \"displayName\": \"galmseatest\",\r\n \"status\": \"Disabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": null,\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-scuba/providers/microsoft.devices/iothubs/galmseatest\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-scuba/providers/microsoft.devices/iothubs/galmseatest\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/hagb-test-canary/providers/Microsoft.Security/IoTSecuritySolutions/hagb-test-canary\",\r\n \"name\": \"hagb-test-canary\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"hagb-test-canary\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/hagb-test-canary/providers/microsoft.operationalinsights/workspaces/hagb-test-canary\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/idperkal-playground/providers/Microsoft.Security/IoTSecuritySolutions/idperkal-iothub\",\r\n \"name\": \"idperkal-iothub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"idperkal-iothub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/idperkal-playground/providers/microsoft.operationalinsights/workspaces/idperkal-log-analytic\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"quickstart\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/iot-hub-demo/providers/Microsoft.Security/IoTSecuritySolutions/ascforiot-demo\",\r\n \"name\": \"ascforiot-demo\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"ASCforIoT-demo\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/iot-hub-demo/providers/microsoft.operationalinsights/workspaces/ascforiot-la\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/iot-hub-demo/providers/microsoft.devices/iothubs/ascforiot-demo\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/iot-hub-demo/providers/microsoft.devices/iothubs/ascforiot-demo\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/iothubignitedemo-rg/providers/Microsoft.Security/IoTSecuritySolutions/ignitedemo-iot-hub\",\r\n \"name\": \"ignitedemo-iot-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"IgniteDemo-IoT-Hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/iothubignitedemo-rg/providers/microsoft.operationalinsights/workspaces/ignitedemo-law\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/iothubignitedemo-rg/providers/microsoft.devices/iothubs/ignitedemo-iot-hub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/iothubignitedemo-rg/providers/microsoft.devices/iothubs/ignitedemo-iot-hub\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/matika-rg/providers/Microsoft.Security/IoTSecuritySolutions/matikas-hub\",\r\n \"name\": \"matikas-hub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"Matikas-hub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/matika-rg/providers/microsoft.operationalinsights/workspaces/matikaloganalitics\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michaele-canary/providers/Microsoft.Security/IoTSecuritySolutions/michaele-canary\",\r\n \"name\": \"michaele-canary\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"eastus2euap\",\r\n \"properties\": {\r\n \"displayName\": \"michaele-canary\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-bugbash0610/providers/microsoft.operationalinsights/workspaces/iothubworkspace-eastus-1571240203429\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michaele-canary/providers/microsoft.devices/iothubs/michaele-canary\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michaele-canary\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michaele-canary/providers/microsoft.devices/iothubs/michaele-canary\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michaliothubbugbash\",\r\n \"name\": \"michaliothubbugbash\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"MichalIoTHubBugBash\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/michalla\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/michalresourcegroup/providers/Microsoft.Security/IoTSecuritySolutions/michaliothubbbsep\",\r\n \"name\": \"michaliothubbbsep\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"MichalIoTHubBBsep\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.devices/iothubs/michaliothubbbsep\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"michalresourcegroup\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.devices/iothubs/michaliothubbbsep\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nir-test/providers/Microsoft.Security/IoTSecuritySolutions/nir-bugbash-1\",\r\n \"name\": \"nir-bugbash-1\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"nir-bugbash-1\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nir-test/providers/microsoft.devices/iothubs/nir-bugbash-1\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nir-test/providers/microsoft.devices/iothubs/nir-bugbash-1\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-ascforiot-overview/providers/Microsoft.Security/IoTSecuritySolutions/ascforiot-overview\",\r\n \"name\": \"ascforiot-overview\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"centraluseuap-Solution\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/test-deployment-in-all-regions/providers/microsoft.operationalinsights/workspaces/test-deployment-in-all-regions\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-ascforiot-overview/providers/microsoft.devices/iothubs/ascforiot-overview\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"RG-ASCforIoT-Overview\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-ascforiot-overview/providers/microsoft.devices/iothubs/ascforiot-overview\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {\r\n \"tag1\": \"val1\"\r\n }\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-bugbash0610/providers/Microsoft.Security/IoTSecuritySolutions/iothub-idperkal\",\r\n \"name\": \"iothub-idperkal\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"iothub-idperkal\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-bugbash0610/providers/microsoft.devices/iothubs/iothub-idperkal\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"rg-iot-bugbash0610\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-bugbash0610/providers/microsoft.devices/iothubs/iothub-idperkal\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-bugbash0610/providers/Microsoft.Security/IoTSecuritySolutions/iothub33\",\r\n \"name\": \"iothub33\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"iotHub33\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/iothubworkspace-eastus-1570653429405\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"rg-iot-bugbash0610\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-bugbash0610/providers/Microsoft.Security/IoTSecuritySolutions/iothub11\",\r\n \"name\": \"iothub11\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"iotHub11\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/iothubworkspace-eastus-1570653429405\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"rg-iot-bugbash0610\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-bugbash0610/providers/Microsoft.Security/IoTSecuritySolutions/iothub222\",\r\n \"name\": \"iothub222\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"iotHub222\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace2\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"RG-IoT-Bugbash0610\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-bugbash0610/providers/Microsoft.Security/IoTSecuritySolutions/iothub555\",\r\n \"name\": \"iothub555\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"eastus2euap\",\r\n \"properties\": {\r\n \"displayName\": \"iotHub555\",\r\n \"status\": \"Disabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": null,\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-bugbash0610/providers/Microsoft.Security/IoTSecuritySolutions/iothub66\",\r\n \"name\": \"iothub66\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"eastus2euap\",\r\n \"properties\": {\r\n \"displayName\": \"iotHub66\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/iothubworkspace-eastus-1570653429405\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"rg-iot-bugbash0610\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-bugbash0610/providers/Microsoft.Security/IoTSecuritySolutions/iothub666\",\r\n \"name\": \"iothub666\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"eastus2euap\",\r\n \"properties\": {\r\n \"displayName\": \"iotHub666\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/michalresourcegroup/providers/microsoft.operationalinsights/workspaces/iothubworkspace-eastus-1570653429405\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-bugbash0610/providers/Microsoft.Security/IoTSecuritySolutions/iothub77\",\r\n \"name\": \"iothub77\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"eastus2euap\",\r\n \"properties\": {\r\n \"displayName\": \"iotHub77\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-bugbash0610/providers/microsoft.operationalinsights/workspaces/iothubworkspace-eastus-1571240203429\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"rg-iot-bugbash0610\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-bugbash0610/providers/Microsoft.Security/IoTSecuritySolutions/iothubsimu1\",\r\n \"name\": \"iothubsimu1\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"iotHubSimu1\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-bugbash0610/providers/microsoft.operationalinsights/workspaces/iothubworkspace-eastus-1571240203429\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-bugbash0610/providers/Microsoft.Security/IoTSecuritySolutions/iothubsimu2\",\r\n \"name\": \"iothubsimu2\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"iotHubSimu2\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-bugbash0610/providers/microsoft.operationalinsights/workspaces/iothubworkspace-eastus-1571240203429\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where (subscriptionId == \\\"075423e9-7d33-4166-8bdf-3920b04e3735\\\" and resourceGroup in~ (\\\"rg-iot-bugbash0610\\\")) | project id, name, type\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/rg-iot-lior/providers/Microsoft.Security/IoTSecuritySolutions/iot-hub-lior\",\r\n \"name\": \"iot-hub-lior\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"IoT-Hub-Lior\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/rg-iot-lior/providers/microsoft.operationalinsights/workspaces/ws-iot-lior\",\r\n \"iotHubs\": [],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/yuvalenv/providers/Microsoft.Security/IoTSecuritySolutions/yuvalhub\",\r\n \"name\": \"yuvalhub\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"centraluseuap\",\r\n \"properties\": {\r\n \"displayName\": \"YuvalHub\",\r\n \"status\": \"Enabled\",\r\n \"export\": [\r\n \"RawEvents\"\r\n ],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/galm-iot-hub/providers/microsoft.operationalinsights/workspaces/075423e9-7d33-4166-8bdf-3920b04e3735-iothubworkspace10\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/yuvalenv/providers/microsoft.devices/iothubs/yuvalhub\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": null,\r\n \"querySubscriptions\": null\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/yuvalenv/providers/microsoft.devices/iothubs/yuvalhub\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n }\r\n ]\r\n}", "StatusCode": 200 } ], "Names": {}, - "Variables": { "SubscriptionId": "075423e9-7d33-4166-8bdf-3920b04e3735" } + "Variables": {} } \ No newline at end of file diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_Update.json b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_Update.json index 7fb6b3b855bb..5af72806e51a 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_Update.json +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IoTSecuritySolutionTests/IotSecuritySolution_Update.json @@ -7,7 +7,7 @@ "RequestBody": "{\r\n \"properties\": {\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where name contains \\\"v2\\\"\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"status\": \"Disabled\"\r\n }\r\n ]\r\n }\r\n}", "RequestHeaders": { "x-ms-client-request-id": [ - "ed939fff-5279-4df3-9b0a-e903b363f899" + "3187bae1-9571-4411-bc4d-853095b15237" ], "accept-language": [ "en-US" @@ -15,8 +15,8 @@ "User-Agent": [ "FxVersion/4.6.26614.01", "OSName/Windows", - "OSVersion/Microsoft.Windows.10.0.18362.", - "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.0.0" + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.1.0" ], "Content-Type": [ "application/json; charset=utf-8" @@ -30,7 +30,7 @@ "no-cache" ], "Date": [ - "Sun, 15 Sep 2019 09:09:49 GMT" + "Thu, 07 Nov 2019 14:20:34 GMT" ], "Pragma": [ "no-cache" @@ -42,13 +42,13 @@ "249" ], "x-ms-request-id": [ - "be7dbbaa-282f-42d2-b94c-f912ed165b49" + "0c0dd500-0f76-4707-88dd-af82ecee96f4" ], "x-ms-correlation-request-id": [ - "be7dbbaa-282f-42d2-b94c-f912ed165b49" + "0c0dd500-0f76-4707-88dd-af82ecee96f4" ], "x-ms-routing-request-id": [ - "UKSOUTH2:20190915T090949Z:be7dbbaa-282f-42d2-b94c-f912ed165b49" + "UKSOUTH2:20191107T142035Z:0c0dd500-0f76-4707-88dd-af82ecee96f4" ], "Strict-Transport-Security": [ "max-age=31536000; includeSubDomains" @@ -57,7 +57,7 @@ "nosniff" ], "Content-Length": [ - "3120" + "3157" ], "Content-Type": [ "application/json; charset=utf-8" @@ -66,7 +66,7 @@ "-1" ] }, - "ResponseBody": "{\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/ResourceGroup-CUS/providers/Microsoft.Security/IoTSecuritySolutions/IotHub-CUS\",\r\n \"name\": \"IotHub-CUS\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"IotHub-CUS-LogAnalytics-CUS\",\r\n \"status\": \"Enabled\",\r\n \"export\": [],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.operationalinsights/workspaces/loganalytics-cus\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where name contains \\\"v2\\\"\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Disabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ]\r\n },\r\n \"tags\": {}\r\n}", + "ResponseBody": "{\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/ResourceGroup-CUS/providers/Microsoft.Security/IoTSecuritySolutions/IotHub-CUS\",\r\n \"name\": \"IotHub-CUS\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutions\",\r\n \"location\": \"Central US\",\r\n \"properties\": {\r\n \"displayName\": \"IotHub-CUS-LogAnalytics-CUS\",\r\n \"status\": \"Enabled\",\r\n \"export\": [],\r\n \"disabledDataSources\": [],\r\n \"workspace\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.operationalinsights/workspaces/loganalytics-cus\",\r\n \"iotHubs\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ],\r\n \"userDefinedResources\": {\r\n \"query\": \"where type != \\\"microsoft.devices/iothubs\\\" | where name contains \\\"v2\\\"\",\r\n \"querySubscriptions\": [\r\n \"075423e9-7d33-4166-8bdf-3920b04e3735\"\r\n ]\r\n },\r\n \"recommendationsConfiguration\": [\r\n {\r\n \"recommendationType\": \"IoT_ACRAuthentication\",\r\n \"name\": \"Service prinicpal not used with ACR repository\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_AgentSendsUnutilizedMessages\",\r\n \"name\": \"Agent sending underutilized messages\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_Baseline\",\r\n \"name\": \"Operating system (OS) baseline validation failure\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeHubMemOptimize\",\r\n \"name\": \"IoT Edge Hub memory can be optimized\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_EdgeLoggingOptions\",\r\n \"name\": \"No logging configured for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InconsistentModuleSettings\",\r\n \"name\": \"SecurityGroup has inconsistent module settings\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_InstallAgent\",\r\n \"name\": \"Install the Azure IoT Security agent\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_DenyAll\",\r\n \"name\": \"Default IP filter policy should be deny\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_IPFilter_PermissiveRule\",\r\n \"name\": \"IP filter rule includes a large IP range\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_OpenPorts\",\r\n \"name\": \"Device has open ports\",\r\n \"status\": \"Disabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"Permissive firewall policy in one of the chains\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveInputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the input chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PermissiveOutputFirewallRules\",\r\n \"name\": \"Permissive firewall rule in the output chain\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_PrivilegedDockerOptions\",\r\n \"name\": \"High level permissions configured in IoT Edge model twin for IoT Edge module\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_RecommendedIpRulesByBaseLine\",\r\n \"name\": \"Recommended Rules for ip filter\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_SharedCredentials\",\r\n \"name\": \"Same authentication credentials used by multiple devices\",\r\n \"status\": \"Enabled\"\r\n },\r\n {\r\n \"recommendationType\": \"IoT_VulnerableTLSCipherSuite\",\r\n \"name\": \"TLS cipher suite upgrade needed\",\r\n \"status\": \"Enabled\"\r\n }\r\n ],\r\n \"autoDiscoveredResources\": [\r\n \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus\"\r\n ],\r\n \"unmaskedIpLoggingStatus\": \"Disabled\"\r\n },\r\n \"tags\": {}\r\n}", "StatusCode": 200 } ], diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionAnalyticsTests/IotSecuritySolutionAnalytics_Get.json b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionAnalyticsTests/IotSecuritySolutionAnalytics_Get.json index 9fd764441ed6..fb9673595897 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionAnalyticsTests/IotSecuritySolutionAnalytics_Get.json +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionAnalyticsTests/IotSecuritySolutionAnalytics_Get.json @@ -7,7 +7,7 @@ "RequestBody": "", "RequestHeaders": { "x-ms-client-request-id": [ - "7a8f5639-3da4-4f50-a09e-9c8967a36f02" + "dfd1f1a9-8d43-4c36-b8e4-0b8a584d3187" ], "accept-language": [ "en-US" @@ -15,8 +15,8 @@ "User-Agent": [ "FxVersion/4.6.26614.01", "OSName/Windows", - "OSVersion/Microsoft.Windows.10.0.18362.", - "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.0.0" + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.1.0" ] }, "ResponseHeaders": { @@ -24,7 +24,7 @@ "no-cache" ], "Date": [ - "Sun, 15 Sep 2019 09:09:47 GMT" + "Thu, 07 Nov 2019 14:20:51 GMT" ], "Pragma": [ "no-cache" @@ -36,13 +36,13 @@ "749" ], "x-ms-request-id": [ - "1e610bc0-b3e7-4e58-bd10-9ef8f1c1e878" + "74c4a17c-64dc-4254-8e7f-daa3324b02f2" ], "x-ms-correlation-request-id": [ - "1e610bc0-b3e7-4e58-bd10-9ef8f1c1e878" + "74c4a17c-64dc-4254-8e7f-daa3324b02f2" ], "x-ms-routing-request-id": [ - "UKSOUTH2:20190915T090947Z:1e610bc0-b3e7-4e58-bd10-9ef8f1c1e878" + "UKSOUTH2:20191107T142051Z:74c4a17c-64dc-4254-8e7f-daa3324b02f2" ], "Strict-Transport-Security": [ "max-age=31536000; includeSubDomains" @@ -51,7 +51,7 @@ "nosniff" ], "Content-Length": [ - "1053" + "723" ], "Content-Type": [ "application/json; charset=utf-8" @@ -60,10 +60,10 @@ "-1" ] }, - "ResponseBody": "{\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/Locations/centralus/default\",\r\n \"name\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/Locations/centralus/default\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutionAnalyticsModel\",\r\n \"properties\": {\r\n \"metrics\": {\r\n \"high\": 0,\r\n \"medium\": 1,\r\n \"low\": 0\r\n },\r\n \"unhealthyDeviceCount\": 1,\r\n \"devicesMetrics\": [\r\n {\r\n \"date\": \"2019-09-15\",\r\n \"devicesMetrics\": {\r\n \"high\": 0,\r\n \"medium\": 1,\r\n \"low\": 0\r\n }\r\n }\r\n ],\r\n \"topAlertedDevices\": [\r\n {\r\n \"deviceId\": \"vm-amamit-bagbash-A\",\r\n \"alertsCount\": 3\r\n }\r\n ],\r\n \"mostPrevalentDeviceAlerts\": [\r\n {\r\n \"alertDisplayName\": \"Detected suspicious use of the useradd command\",\r\n \"alertsCount\": 2,\r\n \"reportedSeverity\": \"Medium\"\r\n }\r\n ],\r\n \"mostPrevalentDeviceRecommendations\": [\r\n {\r\n \"recommendationDisplayName\": \"Permissive firewall policy in one of the chains\",\r\n \"devicesCount\": 1,\r\n \"reportedSeverity\": \"Medium\"\r\n },\r\n {\r\n \"recommendationDisplayName\": \"Device has open ports\",\r\n \"devicesCount\": 1,\r\n \"reportedSeverity\": \"Medium\"\r\n }\r\n ]\r\n }\r\n}", + "ResponseBody": "{\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/Locations/centralus/default\",\r\n \"name\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/Locations/centralus/default\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutionAnalyticsModel\",\r\n \"properties\": {\r\n \"metrics\": {\r\n \"high\": 0,\r\n \"medium\": 2,\r\n \"low\": 0\r\n },\r\n \"unhealthyDeviceCount\": 2,\r\n \"devicesMetrics\": [],\r\n \"topAlertedDevices\": [],\r\n \"mostPrevalentDeviceAlerts\": [],\r\n \"mostPrevalentDeviceRecommendations\": [\r\n {\r\n \"recommendationDisplayName\": \"Permissive firewall policy in one of the chains\",\r\n \"devicesCount\": 2,\r\n \"reportedSeverity\": \"Medium\"\r\n }\r\n ]\r\n }\r\n}", "StatusCode": 200 } ], "Names": {}, - "Variables": { "SubscriptionId": "075423e9-7d33-4166-8bdf-3920b04e3735" } + "Variables": {} } \ No newline at end of file diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionAnalyticsTests/IotSecuritySolutionAnalytics_List.json b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionAnalyticsTests/IotSecuritySolutionAnalytics_List.json index af9e9184b4b0..787f22f78fc0 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionAnalyticsTests/IotSecuritySolutionAnalytics_List.json +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionAnalyticsTests/IotSecuritySolutionAnalytics_List.json @@ -7,7 +7,7 @@ "RequestBody": "", "RequestHeaders": { "x-ms-client-request-id": [ - "9b7a9784-72e9-4a70-9330-f69f096302b3" + "f7d71e83-51ca-4030-981b-dfb9cff8b1f8" ], "accept-language": [ "en-US" @@ -15,8 +15,8 @@ "User-Agent": [ "FxVersion/4.6.26614.01", "OSName/Windows", - "OSVersion/Microsoft.Windows.10.0.18362.", - "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.0.0" + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.1.0" ] }, "ResponseHeaders": { @@ -24,7 +24,7 @@ "no-cache" ], "Date": [ - "Sun, 15 Sep 2019 09:09:24 GMT" + "Thu, 07 Nov 2019 14:20:50 GMT" ], "Pragma": [ "no-cache" @@ -36,13 +36,13 @@ "749" ], "x-ms-request-id": [ - "9a2ebc76-f9e3-427e-8c67-a36f4331a5ac" + "c691eea7-dd82-4aeb-be60-f4079e49e862" ], "x-ms-correlation-request-id": [ - "9a2ebc76-f9e3-427e-8c67-a36f4331a5ac" + "c691eea7-dd82-4aeb-be60-f4079e49e862" ], "x-ms-routing-request-id": [ - "UKSOUTH2:20190915T090925Z:9a2ebc76-f9e3-427e-8c67-a36f4331a5ac" + "UKSOUTH2:20191107T142051Z:c691eea7-dd82-4aeb-be60-f4079e49e862" ], "Strict-Transport-Security": [ "max-age=31536000; includeSubDomains" @@ -51,7 +51,7 @@ "nosniff" ], "Content-Length": [ - "1065" + "735" ], "Content-Type": [ "application/json; charset=utf-8" @@ -60,7 +60,7 @@ "-1" ] }, - "ResponseBody": "{\r\n \"value\": [\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/Locations/centralus/default\",\r\n \"name\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/Locations/centralus/default\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutionAnalyticsModel\",\r\n \"properties\": {\r\n \"metrics\": {\r\n \"high\": 0,\r\n \"medium\": 1,\r\n \"low\": 0\r\n },\r\n \"unhealthyDeviceCount\": 1,\r\n \"devicesMetrics\": [\r\n {\r\n \"date\": \"2019-09-15\",\r\n \"devicesMetrics\": {\r\n \"high\": 0,\r\n \"medium\": 1,\r\n \"low\": 0\r\n }\r\n }\r\n ],\r\n \"topAlertedDevices\": [\r\n {\r\n \"deviceId\": \"vm-amamit-bagbash-A\",\r\n \"alertsCount\": 3\r\n }\r\n ],\r\n \"mostPrevalentDeviceAlerts\": [\r\n {\r\n \"alertDisplayName\": \"Detected suspicious use of the useradd command\",\r\n \"alertsCount\": 2,\r\n \"reportedSeverity\": \"Medium\"\r\n }\r\n ],\r\n \"mostPrevalentDeviceRecommendations\": [\r\n {\r\n \"recommendationDisplayName\": \"Permissive firewall policy in one of the chains\",\r\n \"devicesCount\": 1,\r\n \"reportedSeverity\": \"Medium\"\r\n },\r\n {\r\n \"recommendationDisplayName\": \"Device has open ports\",\r\n \"devicesCount\": 1,\r\n \"reportedSeverity\": \"Medium\"\r\n }\r\n ]\r\n }\r\n }\r\n ]\r\n}", + "ResponseBody": "{\r\n \"value\": [\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/Locations/centralus/default\",\r\n \"name\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/Locations/centralus/default\",\r\n \"type\": \"Microsoft.Security/IoTSecuritySolutionAnalyticsModel\",\r\n \"properties\": {\r\n \"metrics\": {\r\n \"high\": 0,\r\n \"medium\": 2,\r\n \"low\": 0\r\n },\r\n \"unhealthyDeviceCount\": 2,\r\n \"devicesMetrics\": [],\r\n \"topAlertedDevices\": [],\r\n \"mostPrevalentDeviceAlerts\": [],\r\n \"mostPrevalentDeviceRecommendations\": [\r\n {\r\n \"recommendationDisplayName\": \"Permissive firewall policy in one of the chains\",\r\n \"devicesCount\": 2,\r\n \"reportedSeverity\": \"Medium\"\r\n }\r\n ]\r\n }\r\n }\r\n ]\r\n}", "StatusCode": 200 } ], diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsAnalyticsAggregatedAlertTests/IotSecuritySolutionsAnalyticsAggregatedAlert_Dismiss.json b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsAnalyticsAggregatedAlertTests/IotSecuritySolutionsAnalyticsAggregatedAlert_Dismiss.json index 61b754497b36..abd064482ee3 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsAnalyticsAggregatedAlertTests/IotSecuritySolutionsAnalyticsAggregatedAlert_Dismiss.json +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsAnalyticsAggregatedAlertTests/IotSecuritySolutionsAnalyticsAggregatedAlert_Dismiss.json @@ -1,13 +1,13 @@ { "Entries": [ { - "RequestUri": "/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/ResourceGroup-CUS/providers/Microsoft.Security/iotSecuritySolutions/IotHub-CUS/analyticsModels/default/aggregatedAlerts/IoT_SuspiciousUseradd%2F2019-09-15/dismiss?api-version=2019-08-01", - "EncodedRequestUri": "L3N1YnNjcmlwdGlvbnMvMDc1NDIzZTktN2QzMy00MTY2LThiZGYtMzkyMGIwNGUzNzM1L3Jlc291cmNlR3JvdXBzL1Jlc291cmNlR3JvdXAtQ1VTL3Byb3ZpZGVycy9NaWNyb3NvZnQuU2VjdXJpdHkvaW90U2VjdXJpdHlTb2x1dGlvbnMvSW90SHViLUNVUy9hbmFseXRpY3NNb2RlbHMvZGVmYXVsdC9hZ2dyZWdhdGVkQWxlcnRzL0lvVF9TdXNwaWNpb3VzVXNlcmFkZCUyRjIwMTktMDktMTUvZGlzbWlzcz9hcGktdmVyc2lvbj0yMDE5LTA4LTAx", + "RequestUri": "/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nir-test/providers/Microsoft.Security/iotSecuritySolutions/singahub/analyticsModels/default/aggregatedAlerts/IoT_AgentDroppedEvents%2F2019-05-26/dismiss?api-version=2019-08-01", + "EncodedRequestUri": "L3N1YnNjcmlwdGlvbnMvMDc1NDIzZTktN2QzMy00MTY2LThiZGYtMzkyMGIwNGUzNzM1L3Jlc291cmNlR3JvdXBzL25pci10ZXN0L3Byb3ZpZGVycy9NaWNyb3NvZnQuU2VjdXJpdHkvaW90U2VjdXJpdHlTb2x1dGlvbnMvc2luZ2FodWIvYW5hbHl0aWNzTW9kZWxzL2RlZmF1bHQvYWdncmVnYXRlZEFsZXJ0cy9Jb1RfQWdlbnREcm9wcGVkRXZlbnRzJTJGMjAxOS0wNS0yNi9kaXNtaXNzP2FwaS12ZXJzaW9uPTIwMTktMDgtMDE=", "RequestMethod": "POST", "RequestBody": "", "RequestHeaders": { "x-ms-client-request-id": [ - "539f86b7-8f93-4623-a2d3-c26e8981c077" + "09feba33-dcb7-4f41-933d-8f1b1b8cb47d" ], "accept-language": [ "en-US" @@ -15,8 +15,8 @@ "User-Agent": [ "FxVersion/4.6.26614.01", "OSName/Windows", - "OSVersion/Microsoft.Windows.10.0.18362.", - "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.0.0" + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.1.0" ] }, "ResponseHeaders": { @@ -24,7 +24,7 @@ "no-cache" ], "Date": [ - "Sun, 15 Sep 2019 09:43:38 GMT" + "Thu, 07 Nov 2019 14:48:22 GMT" ], "Pragma": [ "no-cache" @@ -36,13 +36,13 @@ "1199" ], "x-ms-request-id": [ - "4c5dc850-6b1d-45e2-ab0d-2b1543e4ad6d" + "94dad508-bbb4-4993-bf5a-b80d42922671" ], "x-ms-correlation-request-id": [ - "4c5dc850-6b1d-45e2-ab0d-2b1543e4ad6d" + "94dad508-bbb4-4993-bf5a-b80d42922671" ], "x-ms-routing-request-id": [ - "UKSOUTH2:20190915T094338Z:4c5dc850-6b1d-45e2-ab0d-2b1543e4ad6d" + "UKSOUTH2:20191107T144823Z:94dad508-bbb4-4993-bf5a-b80d42922671" ], "Strict-Transport-Security": [ "max-age=31536000; includeSubDomains" diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsAnalyticsAggregatedAlertTests/IotSecuritySolutionsAnalyticsAggregatedAlert_Get.json b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsAnalyticsAggregatedAlertTests/IotSecuritySolutionsAnalyticsAggregatedAlert_Get.json index 6fe45ae988b4..58b0bc6975c1 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsAnalyticsAggregatedAlertTests/IotSecuritySolutionsAnalyticsAggregatedAlert_Get.json +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsAnalyticsAggregatedAlertTests/IotSecuritySolutionsAnalyticsAggregatedAlert_Get.json @@ -1,13 +1,13 @@ { "Entries": [ { - "RequestUri": "/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/ResourceGroup-CUS/providers/Microsoft.Security/iotSecuritySolutions/IotHub-CUS/analyticsModels/default/aggregatedAlerts/IoT_SuspiciousUseradd%2F2019-09-15?api-version=2019-08-01", - "EncodedRequestUri": "L3N1YnNjcmlwdGlvbnMvMDc1NDIzZTktN2QzMy00MTY2LThiZGYtMzkyMGIwNGUzNzM1L3Jlc291cmNlR3JvdXBzL1Jlc291cmNlR3JvdXAtQ1VTL3Byb3ZpZGVycy9NaWNyb3NvZnQuU2VjdXJpdHkvaW90U2VjdXJpdHlTb2x1dGlvbnMvSW90SHViLUNVUy9hbmFseXRpY3NNb2RlbHMvZGVmYXVsdC9hZ2dyZWdhdGVkQWxlcnRzL0lvVF9TdXNwaWNpb3VzVXNlcmFkZCUyRjIwMTktMDktMTU/YXBpLXZlcnNpb249MjAxOS0wOC0wMQ==", + "RequestUri": "/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nir-test/providers/Microsoft.Security/iotSecuritySolutions/singahub/analyticsModels/default/aggregatedAlerts/IoT_AgentDroppedEvents%2F2019-05-26?api-version=2019-08-01", + "EncodedRequestUri": "L3N1YnNjcmlwdGlvbnMvMDc1NDIzZTktN2QzMy00MTY2LThiZGYtMzkyMGIwNGUzNzM1L3Jlc291cmNlR3JvdXBzL25pci10ZXN0L3Byb3ZpZGVycy9NaWNyb3NvZnQuU2VjdXJpdHkvaW90U2VjdXJpdHlTb2x1dGlvbnMvc2luZ2FodWIvYW5hbHl0aWNzTW9kZWxzL2RlZmF1bHQvYWdncmVnYXRlZEFsZXJ0cy9Jb1RfQWdlbnREcm9wcGVkRXZlbnRzJTJGMjAxOS0wNS0yNj9hcGktdmVyc2lvbj0yMDE5LTA4LTAx", "RequestMethod": "GET", "RequestBody": "", "RequestHeaders": { "x-ms-client-request-id": [ - "f1a391c4-d81c-4ace-894e-54ee9f45f9d8" + "1736771f-7be2-4c1b-af15-10afd742770f" ], "accept-language": [ "en-US" @@ -15,8 +15,8 @@ "User-Agent": [ "FxVersion/4.6.26614.01", "OSName/Windows", - "OSVersion/Microsoft.Windows.10.0.18362.", - "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.0.0" + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.1.0" ] }, "ResponseHeaders": { @@ -24,7 +24,7 @@ "no-cache" ], "Date": [ - "Sun, 15 Sep 2019 09:43:32 GMT" + "Thu, 07 Nov 2019 14:48:07 GMT" ], "Pragma": [ "no-cache" @@ -33,16 +33,16 @@ "Kestrel" ], "x-ms-ratelimit-remaining-subscription-reads": [ - "11995" + "11999" ], "x-ms-request-id": [ - "a4633721-d1f6-448c-a51c-dbe28ef6dca3" + "abb74f2c-ff4a-4e33-8771-2fc42107ea20" ], "x-ms-correlation-request-id": [ - "a4633721-d1f6-448c-a51c-dbe28ef6dca3" + "abb74f2c-ff4a-4e33-8771-2fc42107ea20" ], "x-ms-routing-request-id": [ - "UKSOUTH2:20190915T094332Z:a4633721-d1f6-448c-a51c-dbe28ef6dca3" + "UKSOUTH2:20191107T144808Z:abb74f2c-ff4a-4e33-8771-2fc42107ea20" ], "Strict-Transport-Security": [ "max-age=31536000; includeSubDomains" @@ -51,7 +51,7 @@ "nosniff" ], "Content-Length": [ - "1607" + "1555" ], "Content-Type": [ "application/json; charset=utf-8" @@ -60,7 +60,7 @@ "-1" ] }, - "ResponseBody": "{\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/Locations/centralus/default/IoT_SuspiciousUseradd/2019-09-15\",\r\n \"name\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/Locations/centralus/default/IoT_SuspiciousUseradd/2019-09-15\",\r\n \"type\": \"Microsoft.Security/IoTSecurityAggregatedAlert\",\r\n \"properties\": {\r\n \"alertType\": \"IoT_SuspiciousUseradd\",\r\n \"alertDisplayName\": \"Detected suspicious use of the useradd command\",\r\n \"aggregatedDateUtc\": \"2019-09-15\",\r\n \"vendorName\": \"Microsoft\",\r\n \"count\": 1,\r\n \"effectedResourceType\": \"IoT Device\",\r\n \"systemSource\": \"Devices\",\r\n \"actionTaken\": \"Detected\",\r\n \"remediationSteps\": \"Review with the user that ran the command if this was legitimate activity that you expect to see on the device. If not, escalate the alert to the information security team.\",\r\n \"reportedSeverity\": \"Medium\",\r\n \"description\": \"Suspicious use of the useradd command detected on the device.\",\r\n \"logAnalyticsQuery\": \"SecurityAlert | where tolower(ResourceId) == tolower('/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus') and tolower(AlertName) == tolower('Detected suspicious use of the useradd command') and TimeGenerated > datetime(2019-09-15T00:00:00Z) and TimeGenerated < datetime(2019-09-16T00:00:00Z) | extend DeviceId=parse_json(ExtendedProperties)['DeviceId'] | project DeviceId, TimeGenerated, DisplayName, AlertSeverity, Description, RemediationSteps, ExtendedProperties\"\r\n }\r\n}", + "ResponseBody": "{\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nir-test/providers/Microsoft.Security/IoTSecuritySolutions/Locations/southeastasia/default/IoT_AgentDroppedEvents/2019-05-26\",\r\n \"name\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nir-test/providers/Microsoft.Security/IoTSecuritySolutions/Locations/southeastasia/default/IoT_AgentDroppedEvents/2019-05-26\",\r\n \"type\": \"Microsoft.Security/IoTSecurityAggregatedAlert\",\r\n \"properties\": {\r\n \"alertType\": \"IoT_AgentDroppedEvents\",\r\n \"alertDisplayName\": \"Azure IoT Security agent dropped security events\",\r\n \"aggregatedDateUtc\": \"2019-05-26\",\r\n \"vendorName\": \"Microsoft\",\r\n \"count\": 1,\r\n \"effectedResourceType\": \"IoT Device\",\r\n \"systemSource\": \"Devices\",\r\n \"actionTaken\": \"Detected\",\r\n \"remediationSteps\": \"To avoid event loss, raise the maxMessageCacheSizeInBytes configuration.\",\r\n \"topDevicesList\": null,\r\n \"reportedSeverity\": \"Low\",\r\n \"description\": \"Azure IoT Security agent dropped more than 5% of your security events in the past 24 hours. (24 hours)\",\r\n \"logAnalyticsQuery\": \"SecurityAlert | where tolower(ResourceId) == tolower('/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nir-test/providers/microsoft.devices/iothubs/singahub') and tolower(AlertName) == tolower('Azure IoT Security agent dropped security events') and TimeGenerated > datetime(2019-05-26T00:00:00Z) and TimeGenerated < datetime(2019-05-27T00:00:00Z) | extend DeviceId=parse_json(ExtendedProperties)['DeviceId'] | project DeviceId, TimeGenerated, DisplayName, AlertSeverity, Description, RemediationSteps, ExtendedProperties\"\r\n }\r\n}", "StatusCode": 200 } ], diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsAnalyticsAggregatedAlertTests/IotSecuritySolutionsAnalyticsAggregatedAlert_List.json b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsAnalyticsAggregatedAlertTests/IotSecuritySolutionsAnalyticsAggregatedAlert_List.json index fb2ee8b6d9cf..edbf3c512a80 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsAnalyticsAggregatedAlertTests/IotSecuritySolutionsAnalyticsAggregatedAlert_List.json +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsAnalyticsAggregatedAlertTests/IotSecuritySolutionsAnalyticsAggregatedAlert_List.json @@ -1,13 +1,13 @@ { "Entries": [ { - "RequestUri": "/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/ResourceGroup-CUS/providers/Microsoft.Security/iotSecuritySolutions/IotHub-CUS/analyticsModels/default/aggregatedAlerts?api-version=2019-08-01", - "EncodedRequestUri": "L3N1YnNjcmlwdGlvbnMvMDc1NDIzZTktN2QzMy00MTY2LThiZGYtMzkyMGIwNGUzNzM1L3Jlc291cmNlR3JvdXBzL1Jlc291cmNlR3JvdXAtQ1VTL3Byb3ZpZGVycy9NaWNyb3NvZnQuU2VjdXJpdHkvaW90U2VjdXJpdHlTb2x1dGlvbnMvSW90SHViLUNVUy9hbmFseXRpY3NNb2RlbHMvZGVmYXVsdC9hZ2dyZWdhdGVkQWxlcnRzP2FwaS12ZXJzaW9uPTIwMTktMDgtMDE=", + "RequestUri": "/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nir-test/providers/Microsoft.Security/iotSecuritySolutions/singahub/analyticsModels/default/aggregatedAlerts?api-version=2019-08-01", + "EncodedRequestUri": "L3N1YnNjcmlwdGlvbnMvMDc1NDIzZTktN2QzMy00MTY2LThiZGYtMzkyMGIwNGUzNzM1L3Jlc291cmNlR3JvdXBzL25pci10ZXN0L3Byb3ZpZGVycy9NaWNyb3NvZnQuU2VjdXJpdHkvaW90U2VjdXJpdHlTb2x1dGlvbnMvc2luZ2FodWIvYW5hbHl0aWNzTW9kZWxzL2RlZmF1bHQvYWdncmVnYXRlZEFsZXJ0cz9hcGktdmVyc2lvbj0yMDE5LTA4LTAx", "RequestMethod": "GET", "RequestBody": "", "RequestHeaders": { "x-ms-client-request-id": [ - "eed60b1f-cf22-433c-9dbc-8a7f385a0de0" + "c1044ee1-eeca-40db-9221-87f73305867f" ], "accept-language": [ "en-US" @@ -15,8 +15,8 @@ "User-Agent": [ "FxVersion/4.6.26614.01", "OSName/Windows", - "OSVersion/Microsoft.Windows.10.0.18362.", - "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.0.0" + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.1.0" ] }, "ResponseHeaders": { @@ -24,7 +24,7 @@ "no-cache" ], "Date": [ - "Sun, 15 Sep 2019 09:41:37 GMT" + "Thu, 07 Nov 2019 14:48:14 GMT" ], "Pragma": [ "no-cache" @@ -36,13 +36,13 @@ "749" ], "x-ms-request-id": [ - "5ee00ce8-e6b8-468f-a2b8-f45892fe6075" + "7bb9f15a-ad97-41bc-bdd4-406af9951e10" ], "x-ms-correlation-request-id": [ - "5ee00ce8-e6b8-468f-a2b8-f45892fe6075" + "7bb9f15a-ad97-41bc-bdd4-406af9951e10" ], "x-ms-routing-request-id": [ - "UKSOUTH2:20190915T094137Z:5ee00ce8-e6b8-468f-a2b8-f45892fe6075" + "UKSOUTH2:20191107T144814Z:7bb9f15a-ad97-41bc-bdd4-406af9951e10" ], "Strict-Transport-Security": [ "max-age=31536000; includeSubDomains" @@ -51,7 +51,7 @@ "nosniff" ], "Content-Length": [ - "1619" + "1571" ], "Content-Type": [ "application/json; charset=utf-8" @@ -60,7 +60,7 @@ "-1" ] }, - "ResponseBody": "{\r\n \"value\": [\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/Locations/centralus/default/IoT_SuspiciousUseradd/2019-09-15\",\r\n \"name\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/Locations/centralus/default/IoT_SuspiciousUseradd/2019-09-15\",\r\n \"type\": \"Microsoft.Security/IoTSecurityAggregatedAlert\",\r\n \"properties\": {\r\n \"alertType\": \"IoT_SuspiciousUseradd\",\r\n \"alertDisplayName\": \"Detected suspicious use of the useradd command\",\r\n \"aggregatedDateUtc\": \"2019-09-15\",\r\n \"vendorName\": \"Microsoft\",\r\n \"count\": 1,\r\n \"effectedResourceType\": \"IoT Device\",\r\n \"systemSource\": \"Devices\",\r\n \"actionTaken\": \"Detected\",\r\n \"remediationSteps\": \"Review with the user that ran the command if this was legitimate activity that you expect to see on the device. If not, escalate the alert to the information security team.\",\r\n \"reportedSeverity\": \"Medium\",\r\n \"description\": \"Suspicious use of the useradd command detected on the device.\",\r\n \"logAnalyticsQuery\": \"SecurityAlert | where tolower(ResourceId) == tolower('/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus') and tolower(AlertName) == tolower('Detected suspicious use of the useradd command') and TimeGenerated > datetime(2019-09-15T00:00:00Z) and TimeGenerated < datetime(2019-09-16T00:00:00Z) | extend DeviceId=parse_json(ExtendedProperties)['DeviceId'] | project DeviceId, TimeGenerated, DisplayName, AlertSeverity, Description, RemediationSteps, ExtendedProperties\"\r\n }\r\n }\r\n ]\r\n}", + "ResponseBody": "{\r\n \"value\": [\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nir-test/providers/Microsoft.Security/IoTSecuritySolutions/Locations/southeastasia/default/Azure IoT Security agent dropped security events/\",\r\n \"name\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/nir-test/providers/Microsoft.Security/IoTSecuritySolutions/Locations/southeastasia/default/Azure IoT Security agent dropped security events/\",\r\n \"type\": \"Microsoft.Security/IoTSecurityAggregatedAlert\",\r\n \"properties\": {\r\n \"alertType\": \"IoT_AgentDroppedEvents\",\r\n \"alertDisplayName\": \"Azure IoT Security agent dropped security events\",\r\n \"aggregatedDateUtc\": \"2019-05-26\",\r\n \"vendorName\": \"Microsoft\",\r\n \"count\": 1,\r\n \"effectedResourceType\": \"IoT Device\",\r\n \"systemSource\": \"Devices\",\r\n \"actionTaken\": \"Detected\",\r\n \"remediationSteps\": \"To avoid event loss, raise the maxMessageCacheSizeInBytes configuration.\",\r\n \"topDevicesList\": [],\r\n \"reportedSeverity\": \"Low\",\r\n \"description\": \"Azure IoT Security agent dropped more than 5% of your security events in the past 24 hours. (24 hours)\",\r\n \"logAnalyticsQuery\": \"SecurityAlert | where tolower(ResourceId) == tolower('/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/nir-test/providers/microsoft.devices/iothubs/singahub') and tolower(AlertType) == tolower('IoT_AgentDroppedEvents') and TimeGenerated > datetime(2019-05-26T00:00:00Z) and TimeGenerated < datetime(2019-05-27T00:00:00Z) | extend DeviceId=parse_json(ExtendedProperties)['DeviceId'] | project DeviceId, TimeGenerated, DisplayName, AlertSeverity, Description, RemediationSteps, ExtendedProperties\"\r\n }\r\n }\r\n ]\r\n}", "StatusCode": 200 } ], diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsAnalyticsRecommendationTests/IotSecuritySolutionsAnalyticsRecommendation_Get.json b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsAnalyticsRecommendationTests/IotSecuritySolutionsAnalyticsRecommendation_Get.json index 8468b0d8fda2..07511486d130 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsAnalyticsRecommendationTests/IotSecuritySolutionsAnalyticsRecommendation_Get.json +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsAnalyticsRecommendationTests/IotSecuritySolutionsAnalyticsRecommendation_Get.json @@ -7,7 +7,7 @@ "RequestBody": "", "RequestHeaders": { "x-ms-client-request-id": [ - "cba04894-1aff-43fd-ab9a-67d90ad27dd5" + "29abaf4c-5c9f-4746-b602-c36ab5f94f67" ], "accept-language": [ "en-US" @@ -15,8 +15,8 @@ "User-Agent": [ "FxVersion/4.6.26614.01", "OSName/Windows", - "OSVersion/Microsoft.Windows.10.0.18362.", - "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.0.0" + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.1.0" ] }, "ResponseHeaders": { @@ -24,7 +24,7 @@ "no-cache" ], "Date": [ - "Sun, 15 Sep 2019 09:08:07 GMT" + "Thu, 07 Nov 2019 14:20:58 GMT" ], "Pragma": [ "no-cache" @@ -36,13 +36,13 @@ "749" ], "x-ms-request-id": [ - "2613c96f-02c5-4bfb-a1fb-bae41afe50a3" + "677d49c7-3932-4669-92c2-9c2296db9404" ], "x-ms-correlation-request-id": [ - "2613c96f-02c5-4bfb-a1fb-bae41afe50a3" + "677d49c7-3932-4669-92c2-9c2296db9404" ], "x-ms-routing-request-id": [ - "UKSOUTH2:20190915T090808Z:2613c96f-02c5-4bfb-a1fb-bae41afe50a3" + "UKSOUTH2:20191107T142058Z:677d49c7-3932-4669-92c2-9c2296db9404" ], "Strict-Transport-Security": [ "max-age=31536000; includeSubDomains" @@ -51,7 +51,7 @@ "nosniff" ], "Content-Length": [ - "1164" + "1165" ], "Content-Type": [ "application/json; charset=utf-8" @@ -60,7 +60,7 @@ "-1" ] }, - "ResponseBody": "{\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/Locations/centralus/default/IoT_OpenPorts\",\r\n \"name\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/Locations/centralus/default/IoT_OpenPorts\",\r\n \"type\": \"Microsoft.Security/IoTSecurityAggregatedRecommendation\",\r\n \"properties\": {\r\n \"recommendationName\": \"IoT_OpenPorts\",\r\n \"recommendationDisplayName\": \"Device has open ports\",\r\n \"recommendationTypeId\": \"\",\r\n \"detectedBy\": \"IoTSecurity\",\r\n \"healthyDevices\": 0,\r\n \"unhealthyDeviceCount\": 1,\r\n \"remediationSteps\": \"Review open ports on the device and make sure they belong to legitimate and necessary processes for the device to function correctly.\",\r\n \"reportedSeverity\": \"Medium\",\r\n \"description\": \"Found a listening endpoint on the device.\",\r\n \"logAnalyticsQuery\": \"SecurityRecommendation | where tolower(AssessedResourceId) == tolower('/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus') and tolower(RecommendationName) == tolower('IoT_OpenPorts')\"\r\n }\r\n}", + "ResponseBody": "{\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/Locations/centralus/default/IoT_OpenPorts\",\r\n \"name\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/Locations/centralus/default/IoT_OpenPorts\",\r\n \"type\": \"Microsoft.Security/IoTSecurityAggregatedRecommendation\",\r\n \"properties\": {\r\n \"recommendationName\": \"IoT_OpenPorts\",\r\n \"recommendationDisplayName\": \"Device has open ports\",\r\n \"recommendationTypeId\": \"\",\r\n \"detectedBy\": \"IoTSecurity\",\r\n \"healthyDevices\": -1,\r\n \"unhealthyDeviceCount\": 2,\r\n \"remediationSteps\": \"Review open ports on the device and make sure they belong to legitimate and necessary processes for the device to function correctly.\",\r\n \"reportedSeverity\": \"Medium\",\r\n \"description\": \"Found a listening endpoint on the device.\",\r\n \"logAnalyticsQuery\": \"SecurityRecommendation | where tolower(AssessedResourceId) == tolower('/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus') and tolower(RecommendationName) == tolower('IoT_OpenPorts')\"\r\n }\r\n}", "StatusCode": 200 } ], diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsAnalyticsRecommendationTests/IotSecuritySolutionsAnalyticsRecommendation_List.json b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsAnalyticsRecommendationTests/IotSecuritySolutionsAnalyticsRecommendation_List.json index 29e0389972b4..3574e4162d8f 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsAnalyticsRecommendationTests/IotSecuritySolutionsAnalyticsRecommendation_List.json +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsAnalyticsRecommendationTests/IotSecuritySolutionsAnalyticsRecommendation_List.json @@ -7,7 +7,7 @@ "RequestBody": "", "RequestHeaders": { "x-ms-client-request-id": [ - "7de41b6d-bc13-476f-a496-d2659e7e2897" + "bf354e65-1454-4a07-8a84-942d8c5588c0" ], "accept-language": [ "en-US" @@ -15,8 +15,8 @@ "User-Agent": [ "FxVersion/4.6.26614.01", "OSName/Windows", - "OSVersion/Microsoft.Windows.10.0.18362.", - "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.0.0" + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.1.0" ] }, "ResponseHeaders": { @@ -24,7 +24,7 @@ "no-cache" ], "Date": [ - "Sun, 15 Sep 2019 09:09:02 GMT" + "Thu, 07 Nov 2019 14:20:58 GMT" ], "Pragma": [ "no-cache" @@ -36,13 +36,13 @@ "749" ], "x-ms-request-id": [ - "33782067-fa44-421a-8d28-500cf39e4f30" + "ac82bca9-67b5-4b72-a243-6506d521ddc9" ], "x-ms-correlation-request-id": [ - "33782067-fa44-421a-8d28-500cf39e4f30" + "ac82bca9-67b5-4b72-a243-6506d521ddc9" ], "x-ms-routing-request-id": [ - "UKSOUTH2:20190915T090902Z:33782067-fa44-421a-8d28-500cf39e4f30" + "UKSOUTH2:20191107T142059Z:ac82bca9-67b5-4b72-a243-6506d521ddc9" ], "Strict-Transport-Security": [ "max-age=31536000; includeSubDomains" @@ -51,7 +51,7 @@ "nosniff" ], "Content-Length": [ - "2533" + "1369" ], "Content-Type": [ "application/json; charset=utf-8" @@ -60,10 +60,10 @@ "-1" ] }, - "ResponseBody": "{\r\n \"value\": [\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/Locations/centralus/default/IoT_OpenPorts\",\r\n \"name\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/Locations/centralus/default/IoT_OpenPorts\",\r\n \"type\": \"Microsoft.Security/IoTSecurityAggregatedRecommendation\",\r\n \"properties\": {\r\n \"recommendationName\": \"IoT_OpenPorts\",\r\n \"recommendationDisplayName\": \"Device has open ports\",\r\n \"recommendationTypeId\": \"\",\r\n \"detectedBy\": \"IoTSecurity\",\r\n \"healthyDevices\": 0,\r\n \"unhealthyDeviceCount\": 1,\r\n \"remediationSteps\": \"Review open ports on the device and make sure they belong to legitimate and necessary processes for the device to function correctly.\",\r\n \"reportedSeverity\": \"Medium\",\r\n \"description\": \"Found a listening endpoint on the device.\",\r\n \"logAnalyticsQuery\": \"SecurityRecommendation | where tolower(AssessedResourceId) == tolower('/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus') and tolower(RecommendationName) == tolower('IoT_OpenPorts')\"\r\n }\r\n },\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/Locations/centralus/default/IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/Locations/centralus/default/IoT_PermissiveFirewallPolicy\",\r\n \"type\": \"Microsoft.Security/IoTSecurityAggregatedRecommendation\",\r\n \"properties\": {\r\n \"recommendationName\": \"IoT_PermissiveFirewallPolicy\",\r\n \"recommendationDisplayName\": \"Permissive firewall policy in one of the chains\",\r\n \"recommendationTypeId\": \"\",\r\n \"detectedBy\": \"IoTSecurity\",\r\n \"healthyDevices\": 0,\r\n \"unhealthyDeviceCount\": 1,\r\n \"remediationSteps\": \"Change firewall policy to drop and add specific rules to permit access to legitimate connections to/from the device.\",\r\n \"reportedSeverity\": \"Medium\",\r\n \"description\": \"Found an allowed firewall policy (INPUT/OUTPUT). The policy should deny all traffic by default and define rules to allow necessary communication to/from the device.\",\r\n \"logAnalyticsQuery\": \"SecurityRecommendation | where tolower(AssessedResourceId) == tolower('/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus') and tolower(RecommendationName) == tolower('IoT_PermissiveFirewallPolicy')\"\r\n }\r\n }\r\n ]\r\n}", + "ResponseBody": "{\r\n \"value\": [\r\n {\r\n \"id\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/Locations/centralus/default/IoT_PermissiveFirewallPolicy\",\r\n \"name\": \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/resourcegroup-cus/providers/Microsoft.Security/IoTSecuritySolutions/Locations/centralus/default/IoT_PermissiveFirewallPolicy\",\r\n \"type\": \"Microsoft.Security/IoTSecurityAggregatedRecommendation\",\r\n \"properties\": {\r\n \"recommendationName\": \"IoT_PermissiveFirewallPolicy\",\r\n \"recommendationDisplayName\": \"Permissive firewall policy in one of the chains\",\r\n \"recommendationTypeId\": \"\",\r\n \"detectedBy\": \"IoTSecurity\",\r\n \"healthyDevices\": -1,\r\n \"unhealthyDeviceCount\": 2,\r\n \"remediationSteps\": \"Change firewall policy to drop and add specific rules to permit access to legitimate connections to/from the device.\",\r\n \"reportedSeverity\": \"Medium\",\r\n \"description\": \"Found an allowed firewall policy (INPUT/OUTPUT). The policy should deny all traffic by default and define rules to allow necessary communication to/from the device.\",\r\n \"logAnalyticsQuery\": \"SecurityRecommendation | where tolower(AssessedResourceId) == tolower('/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourcegroups/resourcegroup-cus/providers/microsoft.devices/iothubs/iothub-cus') and tolower(RecommendationName) == tolower('IoT_PermissiveFirewallPolicy')\"\r\n }\r\n }\r\n ]\r\n}", "StatusCode": 200 } ], "Names": {}, - "Variables": { "SubscriptionId": "075423e9-7d33-4166-8bdf-3920b04e3735" } + "Variables": {} } \ No newline at end of file diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsDeviceSecurityGroupsTests/IotSecuritySolutionsDeviceSecurityGroups_Create.json b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsDeviceSecurityGroupsTests/IotSecuritySolutionsDeviceSecurityGroups_Create.json index f46118a2f598..64c4449d5e80 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsDeviceSecurityGroupsTests/IotSecuritySolutionsDeviceSecurityGroups_Create.json +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsDeviceSecurityGroupsTests/IotSecuritySolutionsDeviceSecurityGroups_Create.json @@ -7,7 +7,7 @@ "RequestBody": "{}", "RequestHeaders": { "x-ms-client-request-id": [ - "946473ec-35e3-4fa8-9169-bfc3514ae78a" + "243c4a09-9a90-4efd-802f-20e292c7b581" ], "accept-language": [ "en-US" @@ -15,8 +15,8 @@ "User-Agent": [ "FxVersion/4.6.26614.01", "OSName/Windows", - "OSVersion/Microsoft.Windows.10.0.18362.", - "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.0.0" + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.1.0" ], "Content-Type": [ "application/json; charset=utf-8" @@ -30,7 +30,7 @@ "no-cache" ], "Date": [ - "Sun, 15 Sep 2019 09:08:06 GMT" + "Thu, 07 Nov 2019 14:21:06 GMT" ], "Pragma": [ "no-cache" @@ -42,13 +42,13 @@ "249" ], "x-ms-request-id": [ - "caf34115-1880-47ff-bb5e-f2e481228eee" + "f2a8005b-df56-4f80-8a65-40a351d790e4" ], "x-ms-correlation-request-id": [ - "caf34115-1880-47ff-bb5e-f2e481228eee" + "f2a8005b-df56-4f80-8a65-40a351d790e4" ], "x-ms-routing-request-id": [ - "UKSOUTH2:20190915T090807Z:caf34115-1880-47ff-bb5e-f2e481228eee" + "UKSOUTH2:20191107T142107Z:f2a8005b-df56-4f80-8a65-40a351d790e4" ], "Strict-Transport-Security": [ "max-age=31536000; includeSubDomains" @@ -71,5 +71,7 @@ } ], "Names": {}, - "Variables": { "SubscriptionId": "075423e9-7d33-4166-8bdf-3920b04e3735" } + "Variables": { + "SubscriptionId": "075423e9-7d33-4166-8bdf-3920b04e3735" + } } \ No newline at end of file diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsDeviceSecurityGroupsTests/IotSecuritySolutionsDeviceSecurityGroups_Delete.json b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsDeviceSecurityGroupsTests/IotSecuritySolutionsDeviceSecurityGroups_Delete.json index 260c4004ab71..09610df5b753 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsDeviceSecurityGroupsTests/IotSecuritySolutionsDeviceSecurityGroups_Delete.json +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsDeviceSecurityGroupsTests/IotSecuritySolutionsDeviceSecurityGroups_Delete.json @@ -7,7 +7,7 @@ "RequestBody": "", "RequestHeaders": { "x-ms-client-request-id": [ - "e38eb118-9e25-4f85-84a0-3ef14011472a" + "a5dbb1f6-7967-4760-acd3-7ece4431d98e" ], "accept-language": [ "en-US" @@ -15,8 +15,8 @@ "User-Agent": [ "FxVersion/4.6.26614.01", "OSName/Windows", - "OSVersion/Microsoft.Windows.10.0.18362.", - "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.0.0" + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.1.0" ] }, "ResponseHeaders": { @@ -24,7 +24,7 @@ "no-cache" ], "Date": [ - "Sun, 15 Sep 2019 09:12:27 GMT" + "Thu, 07 Nov 2019 14:21:22 GMT" ], "Pragma": [ "no-cache" @@ -36,13 +36,13 @@ "14999" ], "x-ms-request-id": [ - "12b3711c-9f3f-474c-93c8-a4cb7efafc66" + "c6b87cd1-e1ce-4d64-b928-704863100128" ], "x-ms-correlation-request-id": [ - "12b3711c-9f3f-474c-93c8-a4cb7efafc66" + "c6b87cd1-e1ce-4d64-b928-704863100128" ], "x-ms-routing-request-id": [ - "UKSOUTH2:20190915T091228Z:12b3711c-9f3f-474c-93c8-a4cb7efafc66" + "UKSOUTH2:20191107T142122Z:c6b87cd1-e1ce-4d64-b928-704863100128" ], "Strict-Transport-Security": [ "max-age=31536000; includeSubDomains" diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsDeviceSecurityGroupsTests/IotSecuritySolutionsDeviceSecurityGroups_Get.json b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsDeviceSecurityGroupsTests/IotSecuritySolutionsDeviceSecurityGroups_Get.json index c9cc89288dc3..15c1c9b4d405 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsDeviceSecurityGroupsTests/IotSecuritySolutionsDeviceSecurityGroups_Get.json +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsDeviceSecurityGroupsTests/IotSecuritySolutionsDeviceSecurityGroups_Get.json @@ -7,7 +7,7 @@ "RequestBody": "", "RequestHeaders": { "x-ms-client-request-id": [ - "67dccfe2-af1d-4b65-a5d0-06a17fa29a4b" + "8c1741ec-3238-4c17-b701-7ad38ce54ce8" ], "accept-language": [ "en-US" @@ -15,8 +15,8 @@ "User-Agent": [ "FxVersion/4.6.26614.01", "OSName/Windows", - "OSVersion/Microsoft.Windows.10.0.18362.", - "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.0.0" + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.1.0" ] }, "ResponseHeaders": { @@ -24,7 +24,7 @@ "no-cache" ], "Date": [ - "Sun, 15 Sep 2019 09:08:04 GMT" + "Thu, 07 Nov 2019 14:21:15 GMT" ], "Pragma": [ "no-cache" @@ -36,13 +36,13 @@ "749" ], "x-ms-request-id": [ - "01c04b2e-0a0a-4d10-9314-b5ee51a35718" + "a741a661-24a2-4f8c-b85d-115654dd2b16" ], "x-ms-correlation-request-id": [ - "01c04b2e-0a0a-4d10-9314-b5ee51a35718" + "a741a661-24a2-4f8c-b85d-115654dd2b16" ], "x-ms-routing-request-id": [ - "UKSOUTH2:20190915T090805Z:01c04b2e-0a0a-4d10-9314-b5ee51a35718" + "UKSOUTH2:20191107T142115Z:a741a661-24a2-4f8c-b85d-115654dd2b16" ], "Strict-Transport-Security": [ "max-age=31536000; includeSubDomains" @@ -65,5 +65,5 @@ } ], "Names": {}, - "Variables": { "SubscriptionId": "075423e9-7d33-4166-8bdf-3920b04e3735" } + "Variables": {} } \ No newline at end of file diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsDeviceSecurityGroupsTests/IotSecuritySolutionsDeviceSecurityGroups_List.json b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsDeviceSecurityGroupsTests/IotSecuritySolutionsDeviceSecurityGroups_List.json index 73c182463778..f002e24a58b2 100644 --- a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsDeviceSecurityGroupsTests/IotSecuritySolutionsDeviceSecurityGroups_List.json +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/IotSecuritySolutionsDeviceSecurityGroupsTests/IotSecuritySolutionsDeviceSecurityGroups_List.json @@ -7,7 +7,7 @@ "RequestBody": "", "RequestHeaders": { "x-ms-client-request-id": [ - "31820c4c-c842-4a55-875c-6311f5e585e1" + "553e2dd6-670c-4854-a8f5-09c7738a0ccd" ], "accept-language": [ "en-US" @@ -15,8 +15,8 @@ "User-Agent": [ "FxVersion/4.6.26614.01", "OSName/Windows", - "OSVersion/Microsoft.Windows.10.0.18362.", - "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.0.0" + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.1.0" ] }, "ResponseHeaders": { @@ -24,7 +24,7 @@ "no-cache" ], "Date": [ - "Sun, 15 Sep 2019 09:08:03 GMT" + "Thu, 07 Nov 2019 14:21:13 GMT" ], "Pragma": [ "no-cache" @@ -36,13 +36,13 @@ "749" ], "x-ms-request-id": [ - "8c7c6833-331a-4564-8881-88dea1505444" + "5285cdc4-cd94-48f8-ba18-dbce612b21ba" ], "x-ms-correlation-request-id": [ - "8c7c6833-331a-4564-8881-88dea1505444" + "5285cdc4-cd94-48f8-ba18-dbce612b21ba" ], "x-ms-routing-request-id": [ - "UKSOUTH2:20190915T090804Z:8c7c6833-331a-4564-8881-88dea1505444" + "UKSOUTH2:20191107T142114Z:5285cdc4-cd94-48f8-ba18-dbce612b21ba" ], "Strict-Transport-Security": [ "max-age=31536000; includeSubDomains" diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/SubAssessmentTests/SubAssessments_Get.json b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/SubAssessmentTests/SubAssessments_Get.json new file mode 100644 index 000000000000..85975087017c --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/SubAssessmentTests/SubAssessments_Get.json @@ -0,0 +1,69 @@ +{ + "Entries": [ + { + "RequestUri": "/subscriptions%2F2f5dc369-6812-4c7b-9900-30baa10952c5%2FresourceGroups%2FsdkGroup%2Fproviders%2FMicrosoft.ContainerRegistry%2Fregistries%2FsdkRef/providers/Microsoft.Security/assessments/94829b47-fb4e-4d24-93fd-e172b5575289/subAssessments/44828267-f9c0-0e11-0372-75507a7092b1?api-version=2019-01-01-preview", + "EncodedRequestUri": "L3N1YnNjcmlwdGlvbnMlMkYyZjVkYzM2OS02ODEyLTRjN2ItOTkwMC0zMGJhYTEwOTUyYzUlMkZyZXNvdXJjZUdyb3VwcyUyRnNka0dyb3VwJTJGcHJvdmlkZXJzJTJGTWljcm9zb2Z0LkNvbnRhaW5lclJlZ2lzdHJ5JTJGcmVnaXN0cmllcyUyRnNka1JlZi9wcm92aWRlcnMvTWljcm9zb2Z0LlNlY3VyaXR5L2Fzc2Vzc21lbnRzLzk0ODI5YjQ3LWZiNGUtNGQyNC05M2ZkLWUxNzJiNTU3NTI4OS9zdWJBc3Nlc3NtZW50cy80NDgyODI2Ny1mOWMwLTBlMTEtMDM3Mi03NTUwN2E3MDkyYjE/YXBpLXZlcnNpb249MjAxOS0wMS0wMS1wcmV2aWV3", + "RequestMethod": "GET", + "RequestBody": "", + "RequestHeaders": { + "x-ms-client-request-id": [ + "b633769b-e9c8-4735-8ecc-30823401409a" + ], + "accept-language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.26614.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.2.0" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Connection": [ + "close" + ], + "Date": [ + "Tue, 12 Nov 2019 08:06:22 GMT" + ], + "Pragma": [ + "no-cache" + ], + "x-ms-failure-cause": [ + "gateway" + ], + "x-ms-request-id": [ + "3ff55612-875f-48a8-ab09-4f684b4da9df" + ], + "x-ms-correlation-request-id": [ + "3ff55612-875f-48a8-ab09-4f684b4da9df" + ], + "x-ms-routing-request-id": [ + "UKSOUTH2:20191112T080622Z:3ff55612-875f-48a8-ab09-4f684b4da9df" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "X-Content-Type-Options": [ + "nosniff" + ], + "Content-Length": [ + "410" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Expires": [ + "-1" + ] + }, + "ResponseBody": "{ \"type\": \"Microsoft.Security\/assessments\/subAssessments\", \"id\": \"\/subscriptions\/2f5dc369-6812-4c7b-9900-30baa10952c5\/resourceGroups\/sdkGroup\/providers\/Microsoft.ContainerRegistry\/registries\/sdkRef\/providers\/Microsoft.Security\/assessments\/94829b47-fb4e-4d24-93fd-e172b5575289\/subassessments\/44828267-f9c0-0e11-0372-75507a7092b1\", \"name\": \"44828267-f9c0-0e11-0372-75507a7092b1\", \"properties\": { \"id\": \"176805\", \"displayName\": \"Debian Security Update for wget (DSA 4425-1)\", \"status\": { \"code\": \"Unhealthy\", \"severity\": \"Medium\" }, \"remediation\": \"Refer to Debian security advisory DSA 4425-1<\/A> to address this issue and obtain further details.\\n

Patch:
\\nFollowing are links for downloading patches to fix the vulnerabilities:\\n

DSA 4425-1: Debian<\/A>\", \"impact\": \"This vulnerability can also be used to cause a limited denial of service in the form of interruptions in resource availability.\", \"category\": \"Debian\", \"description\": \"Debian has released security update for wget to fix the vulnerabilities.

\", \"timeGenerated\": \"2019-09-14T13:39:06.1129488Z\", \"resourceDetails\": { \"source\": \"Azure\", \"id\": \"\/repositories\/dotnet\/core\/sdk\/images\/sha256:fe9f8e9122d94cc2d95d51bd6c0684ea61130d8133b707ad5cb80900bf231a7c\" }, \"additionalData\": { \"assessedResourceType\": \"ContainerRegistryVulnerability\", \"type\": \"Vulnerability\", \"cvss\": { \"2.0\": { \"base\": 7.5 }, \"3.0\": { \"base\": 9.8 } }, \"patchable\": true, \"cve\": [ { \"title\": \"CVE-2019-5953\", \"link\": \"http:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2019-5953\" } ], \"publishedTime\": \"2019-04-10T09:58:21Z\", \"vendorReferences\": [ { \"title\": \"DSA 4425-1\", \"link\": \"https:\/\/lists.debian.org\/debian-security-announce\/2019\/msg00069.html\" } ], \"registryHost\": \"sdkRef.azurecr.io\", \"repositoryName\": \"dotnet\/core\/sdk\", \"imageDigest\": \"sha256:fe9f8e9122d94cc2d95d51bd6c0684ea61130d8133b707ad5cb80900bf231a7c\" } } } ", + "StatusCode": 200 + } + ], + "Names": {}, + "Variables": {} +} \ No newline at end of file diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/SubAssessmentTests/SubAssessments_List.json b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/SubAssessmentTests/SubAssessments_List.json new file mode 100644 index 000000000000..2a4c5ccdf595 --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/SubAssessmentTests/SubAssessments_List.json @@ -0,0 +1,69 @@ +{ + "Entries": [ + { + "RequestUri": "/subscriptions%2F2f5dc369-6812-4c7b-9900-30baa10952c5%2FresourceGroups%2FsdkGroup%2Fproviders%2FMicrosoft.ContainerRegistry%2Fregistries%2FsdkRef/providers/Microsoft.Security/assessments/94829b47-fb4e-4d24-93fd-e172b5575289/subAssessments?api-version=2019-01-01-preview", + "EncodedRequestUri": "L3N1YnNjcmlwdGlvbnMlMkYyZjVkYzM2OS02ODEyLTRjN2ItOTkwMC0zMGJhYTEwOTUyYzUlMkZyZXNvdXJjZUdyb3VwcyUyRnNka0dyb3VwJTJGcHJvdmlkZXJzJTJGTWljcm9zb2Z0LkNvbnRhaW5lclJlZ2lzdHJ5JTJGcmVnaXN0cmllcyUyRnNka1JlZi9wcm92aWRlcnMvTWljcm9zb2Z0LlNlY3VyaXR5L2Fzc2Vzc21lbnRzLzk0ODI5YjQ3LWZiNGUtNGQyNC05M2ZkLWUxNzJiNTU3NTI4OS9zdWJBc3Nlc3NtZW50cz9hcGktdmVyc2lvbj0yMDE5LTAxLTAxLXByZXZpZXc=", + "RequestMethod": "GET", + "RequestBody": "", + "RequestHeaders": { + "x-ms-client-request-id": [ + "c140cdfc-0a2e-47cc-9eca-99e8cdd836c1" + ], + "accept-language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.26614.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.2.0" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Connection": [ + "close" + ], + "Date": [ + "Tue, 12 Nov 2019 08:06:22 GMT" + ], + "Pragma": [ + "no-cache" + ], + "x-ms-failure-cause": [ + "gateway" + ], + "x-ms-request-id": [ + "188d64fb-8085-45be-a859-a6e92c7ed890" + ], + "x-ms-correlation-request-id": [ + "188d64fb-8085-45be-a859-a6e92c7ed890" + ], + "x-ms-routing-request-id": [ + "UKSOUTH2:20191112T080622Z:188d64fb-8085-45be-a859-a6e92c7ed890" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "X-Content-Type-Options": [ + "nosniff" + ], + "Content-Length": [ + "410" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Expires": [ + "-1" + ] + }, + "ResponseBody": "{ \"value\": [ { \"type\": \"Microsoft.Security\/assessments\/subAssessments\", \"id\": \"\/subscriptions\/2f5dc369-6812-4c7b-9900-30baa10952c5\/resourceGroups\/sdkGroup\/providers\/Microsoft.ContainerRegistry\/registries\/sdkRef\/providers\/Microsoft.Security\/assessments\/94829b47-fb4e-4d24-93fd-e172b5575289\/subassessments\/44828267-f9c0-0e11-0372-75507a7092b1\", \"name\": \"44828267-f9c0-0e11-0372-75507a7092b1\", \"properties\": { \"id\": \"176805\", \"displayName\": \"Debian Security Update for wget (DSA 4425-1)\", \"status\": { \"code\": \"Unhealthy\", \"severity\": \"Medium\" }, \"remediation\": \"Refer to Debian security advisory DSA 4425-1<\/A> to address this issue and obtain further details.\\n

Patch:
\\nFollowing are links for downloading patches to fix the vulnerabilities:\\n

DSA 4425-1: Debian<\/A>\", \"impact\": \"This vulnerability can also be used to cause a limited denial of service in the form of interruptions in resource availability.\", \"category\": \"Debian\", \"description\": \"Debian has released security update for wget to fix the vulnerabilities.

\", \"timeGenerated\": \"2019-09-14T13:39:06.1129488Z\", \"resourceDetails\": { \"source\": \"Azure\", \"id\": \"\/repositories\/dotnet\/core\/sdk\/images\/sha256:fe9f8e9122d94cc2d95d51bd6c0684ea61130d8133b707ad5cb80900bf231a7c\" }, \"additionalData\": { \"assessedResourceType\": \"ContainerRegistryVulnerability\", \"type\": \"Vulnerability\", \"cvss\": { \"2.0\": { \"base\": 7.5 }, \"3.0\": { \"base\": 9.8 } }, \"patchable\": true, \"cve\": [ { \"title\": \"CVE-2019-5953\", \"link\": \"http:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2019-5953\" } ], \"publishedTime\": \"2019-04-10T09:58:21Z\", \"vendorReferences\": [ { \"title\": \"DSA 4425-1\", \"link\": \"https:\/\/lists.debian.org\/debian-security-announce\/2019\/msg00069.html\" } ], \"registryHost\": \"sdkRef.azurecr.io\", \"repositoryName\": \"dotnet\/core\/sdk\", \"imageDigest\": \"sha256:fe9f8e9122d94cc2d95d51bd6c0684ea61130d8133b707ad5cb80900bf231a7c\" } } } ] } ", + "StatusCode": 200 + } + ], + "Names": {}, + "Variables": {} +} \ No newline at end of file diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/SubAssessmentTests/SubAssessments_ListAll.json b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/SubAssessmentTests/SubAssessments_ListAll.json new file mode 100644 index 000000000000..053874ce00f7 --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SessionRecords/SubAssessmentTests/SubAssessments_ListAll.json @@ -0,0 +1,71 @@ +{ + "Entries": [ + { + "RequestUri": "/subscriptions%2F2f5dc369-6812-4c7b-9900-30baa10952c5/providers/Microsoft.Security/subAssessments?api-version=2019-01-01-preview", + "EncodedRequestUri": "L3N1YnNjcmlwdGlvbnMlMkYyZjVkYzM2OS02ODEyLTRjN2ItOTkwMC0zMGJhYTEwOTUyYzUvcHJvdmlkZXJzL01pY3Jvc29mdC5TZWN1cml0eS9zdWJBc3Nlc3NtZW50cz9hcGktdmVyc2lvbj0yMDE5LTAxLTAxLXByZXZpZXc=", + "RequestMethod": "GET", + "RequestBody": "", + "RequestHeaders": { + "x-ms-client-request-id": [ + "8836ee9b-05c3-4a4e-a661-8a011d40a71a" + ], + "accept-language": [ + "en-US" + ], + "User-Agent": [ + "FxVersion/4.6.26614.01", + "OSName/Windows", + "OSVersion/Microsoft.Windows.10.0.18363.", + "Microsoft.Azure.Management.Security.SecurityCenterClient/1.0.2.0" + ] + }, + "ResponseHeaders": { + "Cache-Control": [ + "no-cache" + ], + "Connection": [ + "close" + ], + "Date": [ + "Tue, 12 Nov 2019 08:06:21 GMT" + ], + "Pragma": [ + "no-cache" + ], + "x-ms-failure-cause": [ + "gateway" + ], + "x-ms-request-id": [ + "ed37d68d-3488-4bfe-a7a8-b8cccec7d905" + ], + "x-ms-correlation-request-id": [ + "ed37d68d-3488-4bfe-a7a8-b8cccec7d905" + ], + "x-ms-routing-request-id": [ + "UKSOUTH2:20191112T080621Z:ed37d68d-3488-4bfe-a7a8-b8cccec7d905" + ], + "Strict-Transport-Security": [ + "max-age=31536000; includeSubDomains" + ], + "X-Content-Type-Options": [ + "nosniff" + ], + "Content-Length": [ + "410" + ], + "Content-Type": [ + "application/json; charset=utf-8" + ], + "Expires": [ + "-1" + ] + }, + "ResponseBody": "{ \"value\": [ { \"type\": \"Microsoft.Security\/assessments\/subAssessments\", \"id\": \"\/subscriptions\/2f5dc369-6812-4c7b-9900-30baa10952c5\/resourceGroups\/sdkGroup\/providers\/Microsoft.ContainerRegistry\/registries\/sdkRef\/providers\/Microsoft.Security\/assessments\/94829b47-fb4e-4d24-93fd-e172b5575289\/subassessments\/44828267-f9c0-0e11-0372-75507a7092b1\", \"name\": \"44828267-f9c0-0e11-0372-75507a7092b1\", \"properties\": { \"id\": \"176805\", \"displayName\": \"Debian Security Update for wget (DSA 4425-1)\", \"status\": { \"code\": \"Unhealthy\", \"severity\": \"Medium\" }, \"remediation\": \"Refer to Debian security advisory DSA 4425-1<\/A> to address this issue and obtain further details.\\n

Patch:
\\nFollowing are links for downloading patches to fix the vulnerabilities:\\n

DSA 4425-1: Debian<\/A>\", \"impact\": \"This vulnerability can also be used to cause a limited denial of service in the form of interruptions in resource availability.\", \"category\": \"Debian\", \"description\": \"Debian has released security update for wget to fix the vulnerabilities.

\", \"timeGenerated\": \"2019-09-14T13:39:06.1129488Z\", \"resourceDetails\": { \"source\": \"Azure\", \"id\": \"\/repositories\/dotnet\/core\/sdk\/images\/sha256:fe9f8e9122d94cc2d95d51bd6c0684ea61130d8133b707ad5cb80900bf231a7c\" }, \"additionalData\": { \"assessedResourceType\": \"ContainerRegistryVulnerability\", \"type\": \"Vulnerability\", \"cvss\": { \"2.0\": { \"base\": 7.5 }, \"3.0\": { \"base\": 9.8 } }, \"patchable\": true, \"cve\": [ { \"title\": \"CVE-2019-5953\", \"link\": \"http:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2019-5953\" } ], \"publishedTime\": \"2019-04-10T09:58:21Z\", \"vendorReferences\": [ { \"title\": \"DSA 4425-1\", \"link\": \"https:\/\/lists.debian.org\/debian-security-announce\/2019\/msg00069.html\" } ], \"registryHost\": \"sdkRef.azurecr.io\", \"repositoryName\": \"dotnet\/core\/sdk\", \"imageDigest\": \"sha256:fe9f8e9122d94cc2d95d51bd6c0684ea61130d8133b707ad5cb80900bf231a7c\" } } } ], \"nextLink\": \"https:\/\/management.azure.com\/subscriptions\/2f5dc369-6812-4c7b-9900-30baa10952c5\/providers\/Microsoft.security\/subassessments?api-version=2019-01-01-preview&NextLink=%2bRID%3a~v74KAKYbp44GAQAAAADgCg%3d%3d%23RT%3a1%23TRC%3a100%23ISV%3a2%23IEO%3a65536%23FPC%3aAggAAAAAgCsAAAAAAACAKwAAAAAAAIArAAAoAAEBwP9BQAcAcQAA%2bBFA%2b%2f8TQP9%2f3D%2f%2b%2f1FA%2fz8xAAD4MUD1%2fyFAgwA%3d\" } ", + "StatusCode": 200 + } + ], + "Names": {}, + "Variables": { + "SubscriptionId": "2f5dc369-6812-4c7b-9900-30baa10952c5" + } +} \ No newline at end of file diff --git a/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SubAssessment/SubAssessmentTests.cs b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SubAssessment/SubAssessmentTests.cs new file mode 100644 index 000000000000..cb9d9fcac4d3 --- /dev/null +++ b/sdk/securitycenter/Microsoft.Azure.Management.SecurityCenter/tests/SubAssessment/SubAssessmentTests.cs @@ -0,0 +1,94 @@ +// Copyright (c) Microsoft Corporation. All rights reserved. +// Licensed under the MIT License. See License.txt in the project root for license information. + +using Microsoft.Azure.Management.Security; +using Microsoft.Azure.Management.Security.Models; +using Microsoft.Azure.Test.HttpRecorder; +using Microsoft.Rest.Azure; +using Microsoft.Rest.ClientRuntime.Azure.TestFramework; +using SecurityCenter.Tests.Helpers; +using System.Net; +using Xunit; + +namespace SecurityCenter.Tests +{ + public class SubAssessmentTests : TestBase + { + #region Test setup + private static readonly string AssessmentName = "94829b47-fb4e-4d24-93fd-e172b5575289"; + private static readonly string SubAssessmentName = "44828267-f9c0-0e11-0372-75507a7092b1"; + private static readonly string AscLocation = "centralus"; + private static TestEnvironment TestEnvironment { get; set; } + #endregion + + private static SecurityCenterClient GetSecurityCenterClient(MockContext context) + { + if (TestEnvironment == null && HttpMockServer.Mode == HttpRecorderMode.Record) + { + TestEnvironment = TestEnvironmentFactory.GetTestEnvironment(); + } + + var handler = new RecordedDelegatingHandler { StatusCodeToReturn = HttpStatusCode.OK, IsPassThrough = true }; + + var securityCenterClient = HttpMockServer.Mode == HttpRecorderMode.Record + ? context.GetServiceClient(TestEnvironment, handlers: handler) + : context.GetServiceClient(handlers: handler); + + securityCenterClient.AscLocation = AscLocation; + + return securityCenterClient; + } + + #region Tests + [Fact] + public void SubAssessments_ListAll() + { + string scope = "subscriptions/2f5dc369-6812-4c7b-9900-30baa10952c5"; + + using (var context = MockContext.Start(this.GetType())) + { + var securityCenterClient = GetSecurityCenterClient(context); + var ret = securityCenterClient.SubAssessments.ListAll(scope); + Validate(ret); + } + } + + [Fact] + public void SubAssessments_List() + { + string scope = "subscriptions/2f5dc369-6812-4c7b-9900-30baa10952c5/resourceGroups/sdkGroup/providers/Microsoft.ContainerRegistry/registries/sdkRef"; + + using (var context = MockContext.Start(this.GetType())) + { + var securityCenterClient = GetSecurityCenterClient(context); + var ret = securityCenterClient.SubAssessments.List(scope, AssessmentName); + Validate(ret); + } + } + + [Fact] + public void SubAssessments_Get() + { + string scope = "subscriptions/2f5dc369-6812-4c7b-9900-30baa10952c5/resourceGroups/sdkGroup/providers/Microsoft.ContainerRegistry/registries/sdkRef"; + + using (var context = MockContext.Start(this.GetType())) + { + var securityCenterClient = GetSecurityCenterClient(context); + var ret = securityCenterClient.SubAssessments.Get(scope, AssessmentName, SubAssessmentName); + Assert.NotNull(ret); + } + } + #endregion + + #region Validations + private static void Validate(IPage ret) + { + Assert.True(ret.IsAny(), "Got empty list"); + foreach (var item in ret) + { + Assert.NotNull(item); + } + } + #endregion + } +}