6.3.0

JulianHayward · Jul 19, 2023 · 1832f8a · 1832f8a
1 parent 5fec586
commit 1832f8a
Show file tree

Hide file tree

Showing 8 changed files with 51 additions and 29 deletions.
diff --git a/README.md b/README.md
@@ -78,22 +78,10 @@ The [Azure Governance Visualizer Accelerator](https://github.com/Azure/Azure-Gov
 
 ## Release history
 
-__Changes__ (2023-Jul-17)
+__Changes__ (2023-Jul-19)
 
-* Update to Azure DevOps Pipeline v6_major_20230717_1 [AzGovViz.pipeline.yml](./.azuredevops/pipelines/AzGovViz.pipeline.yml)
-  * Output of published WebApp URL
-
-__Changes__ (2023-Jul-17)
-
-* update README.md and setup.md - add reference to the [Azure Governance Visualizer Accelerator](https://github.com/Azure/Azure-Governance-Visualizer-Accelerator)
-
-__Changes__ (2023-Jun-23 / 6.2.3 Minor)
-
-* fix feature 'network' - optimize handling of unknown Subscription Ids 
-
-__Changes__ (2023-Jun-16 / 6.2.1 Minor)
-
-* fix feature diagnostic capable resource name containing "+"
+* update feature __UserAssigned Managed Identities assigned to Resources / vice versa__
+  * show if UAMI is used cross subscription (__TenantSummary__, __ScopeInsights__ & CSV output)
 
 Passed tests: Powershell Core 7.3.3 on Windows
 Passed tests: Powershell Core 7.2.10 Azure DevOps hosted agent ubuntu-22.04

diff --git a/history.md b/history.md
@@ -4,13 +4,15 @@
 
 ### Azure Governance Visualizer version 6
 
-__Changes__ (2023-Jul-17)
+__Changes__ (2023-Jul-19)
 
-* Update to Azure DevOps Pipeline v6_major_20230717_1 [AzGovViz.pipeline.yml](./.azuredevops/pipelines/AzGovViz.pipeline.yml)
-  * Output of published WebApp URL
+* update feature __UserAssigned Managed Identities assigned to Resources / vice versa__
+  * show if UAMI is used cross subscription (__TenantSummary__, __ScopeInsights__ & CSV output)
 
 __Changes__ (2023-Jul-17)
 
+* update to Azure DevOps Pipeline v6_major_20230717_1 [AzGovViz.pipeline.yml](./.azuredevops/pipelines/AzGovViz.pipeline.yml)
+  * Output of published WebApp URL
 * update README.md and setup.md - add reference to the [Azure Governance Visualizer Accelerator](https://github.com/Azure/Azure-Governance-Visualizer-Accelerator)
 
 __Changes__ (2023-Jun-23 / 6.2.3 Minor)

diff --git a/pwsh/AzGovVizParallel.ps1 b/pwsh/AzGovVizParallel.ps1
@@ -362,7 +362,7 @@ Param
     $AzAPICallVersion = '1.1.72',
 
     [string]
-    $ProductVersion = '6.2.3',
+    $ProductVersion = '6.3.0',
 
     [string]
     $GithubRepository = 'aka.ms/AzGovViz',
@@ -10603,15 +10603,16 @@ extensions: [{ name: 'sort' }]
 <th>MI ResourceId</th>
 <th>MI AAD SP objectId</th>
 <th>MI AAD SP applicationId</th>
-<th>MI count Res assignments
+<th>MI count Res assignments</th>
+<th>MI used cross subscription</th>
 <th class="uamiresaltbgc">Res Name</th>
 <th class="uamiresaltbgc">Res Type</th>
 <th class="uamiresaltbgc">Res MgPath</th>
 <th class="uamiresaltbgc">Res Subscription Name</th>
 <th class="uamiresaltbgc">Res Subscription Id</th>
 <th class="uamiresaltbgc">Res ResourceGroup</th>
 <th class="uamiresaltbgc">Res Id</th>
-<th class="uamiresaltbgc">Res count assigned MIs
+<th class="uamiresaltbgc">Res count assigned MIs</th>
 </tr>
 </thead>
 <tbody>
@@ -10629,6 +10630,7 @@ extensions: [{ name: 'sort' }]
     <td>$($miResEntry.miPrincipalId)</td>
     <td>$($miResEntry.miClientId)</td>
     <td>$($htUserAssignedIdentitiesAssignedResources.($miResEntry.miPrincipalId).ResourcesCount)</td>
+    <td>$($miResEntry.miCrossSubscription)</td>
     <td>$($miResEntry.resourceName)</td>
     <td class="breakwordall">$($miResEntry.resourceType)</td>
     <td>$($miResEntry.resourceMgPath)</td>
@@ -10677,7 +10679,8 @@ paging: {results_per_page: ['Records: ', [$spectrum]]},/*state: {types: ['local_
                 [void]$htmlScopeInsights.AppendLine(@"
                 btn_reset: true, highlight_keywords: true, alternate_rows: true, auto_filter: { delay: 1100 }, no_results_message: true,
                 linked_filters: true,
-                col_10: 'select',
+                col_9: 'select',
+                col_11: 'select',
                 col_types: [
                     'caseinsensitivestring',
                     'caseinsensitivestring',
@@ -10695,6 +10698,7 @@ paging: {results_per_page: ['Records: ', [$spectrum]]},/*state: {types: ['local_
                     'caseinsensitivestring',
                     'caseinsensitivestring',
                     'caseinsensitivestring',
+                    'caseinsensitivestring',
                     'number'
                 ],
                 extensions: [{ name: 'colsVisibility', text: 'Columns: ', enable_tick_all: true },{ name: 'sort' }]
@@ -21599,6 +21603,7 @@ extensions: [{ name: 'sort' }]
 <th>MI AAD SP objectId</th>
 <th>MI AAD SP applicationId</th>
 <th>MI count Res assignments</th>
+<th>MI used cross subscription</th>
 <th class="uamiresaltbgc">Res Name</th>
 <th class="uamiresaltbgc">Res Type</th>
 <th class="uamiresaltbgc">Res MgPath</th>
@@ -21628,6 +21633,7 @@ extensions: [{ name: 'sort' }]
                         <td>$($miResEntry.miPrincipalId)</td>
                         <td>$($miResEntry.miClientId)</td>
                         <td>$($htUserAssignedIdentitiesAssignedResources.($miResEntry.miPrincipalId).ResourcesCount)</td>
+                        <td>$($miResEntry.miCrossSubscription)</td>
                         <td>$($miResEntry.resourceName)</td>
                         <td class="breakwordall">$($miResEntry.resourceType)</td>
                         <td>$($miResEntry.resourceMgPath)</td>
@@ -21650,6 +21656,7 @@ extensions: [{ name: 'sort' }]
                             MIAADSPObjectId       = $miResEntry.miPrincipalId
                             MIAADSPApplicationId  = $miResEntry.miClientId
                             MICountResAssignments = $htUserAssignedIdentitiesAssignedResources.($miResEntry.miPrincipalId).ResourcesCount
+                            MICrossSubscription   = $miResEntry.miCrossSubscription
                             ResName               = $miResEntry.resourceName
                             ResType               = $miResEntry.resourceType
                             ResMgPath             = $miResEntry.resourceMgPath
@@ -21704,7 +21711,8 @@ paging: {results_per_page: ['Records: ', [$spectrum]]},/*state: {types: ['local_
             [void]$htmlTenantSummary.AppendLine(@"
 btn_reset: true, highlight_keywords: true, alternate_rows: true, auto_filter: { delay: 1100 }, no_results_message: true,
             linked_filters: true,
-            col_10: 'select',
+            col_9: 'select',
+            col_11: 'select',
             col_types: [
                 'caseinsensitivestring',
                 'caseinsensitivestring',
@@ -21722,6 +21730,7 @@ btn_reset: true, highlight_keywords: true, alternate_rows: true, auto_filter: {
                 'caseinsensitivestring',
                 'caseinsensitivestring',
                 'caseinsensitivestring',
+                'caseinsensitivestring',
                 'number'
             ],
             extensions: [{ name: 'colsVisibility', text: 'Columns: ', enable_tick_all: true },{ name: 'sort' }]
@@ -30433,6 +30442,12 @@ function dataCollectionResources {
                     if ((-not [string]::IsNullOrEmpty($resource.Id)) -and (-not [string]::IsNullOrEmpty($_.Value.principalId))) {
                         $hlp = ($_.Name.split('/'))
                         $hlpMiSubId = $hlp[2]
+                        if ($scopeId -eq $hlpMiSubId) {
+                            $miCrossSubscription = $false
+                        }
+                        else {
+                            $miCrossSubscription = $true
+                        }
                         $null = $script:arrayUserAssignedIdentities4Resources.Add([PSCustomObject]@{
                                 resourceId                = $resource.Id
                                 resourceName              = $resource.name
@@ -30450,6 +30465,7 @@ function dataCollectionResources {
                                 miResourceGroupName       = $hlp[4]
                                 miResourceId              = $_.Name
                                 miResourceName            = $_.Name -replace '.*/'
+                                miCrossSubscription       = $miCrossSubscription
                             })
                     }
                 }

diff --git a/pwsh/dev/devAzGovVizParallel.ps1 b/pwsh/dev/devAzGovVizParallel.ps1
@@ -362,7 +362,7 @@ Param
     $AzAPICallVersion = '1.1.72',
 
     [string]
-    $ProductVersion = '6.2.3',
+    $ProductVersion = '6.3.0',
 
     [string]
     $GithubRepository = 'aka.ms/AzGovViz',

diff --git a/pwsh/dev/functions/dataCollection/dataCollectionFunctions.ps1 b/pwsh/dev/functions/dataCollection/dataCollectionFunctions.ps1
@@ -1283,6 +1283,12 @@ function dataCollectionResources {
                     if ((-not [string]::IsNullOrEmpty($resource.Id)) -and (-not [string]::IsNullOrEmpty($_.Value.principalId))) {
                         $hlp = ($_.Name.split('/'))
                         $hlpMiSubId = $hlp[2]
+                        if ($scopeId -eq $hlpMiSubId) {
+                            $miCrossSubscription = $false
+                        }
+                        else {
+                            $miCrossSubscription = $true
+                        }
                         $null = $script:arrayUserAssignedIdentities4Resources.Add([PSCustomObject]@{
                                 resourceId                = $resource.Id
                                 resourceName              = $resource.name
@@ -1300,6 +1306,7 @@ function dataCollectionResources {
                                 miResourceGroupName       = $hlp[4]
                                 miResourceId              = $_.Name
                                 miResourceName            = $_.Name -replace '.*/'
+                                miCrossSubscription       = $miCrossSubscription
                             })
                     }
                 }

diff --git a/pwsh/dev/functions/processScopeInsightsMgOrSub.ps1 b/pwsh/dev/functions/processScopeInsightsMgOrSub.ps1
@@ -2174,15 +2174,16 @@ extensions: [{ name: 'sort' }]
 <th>MI ResourceId</th>
 <th>MI AAD SP objectId</th>
 <th>MI AAD SP applicationId</th>
-<th>MI count Res assignments
+<th>MI count Res assignments</th>
+<th>MI used cross subscription</th>
 <th class="uamiresaltbgc">Res Name</th>
 <th class="uamiresaltbgc">Res Type</th>
 <th class="uamiresaltbgc">Res MgPath</th>
 <th class="uamiresaltbgc">Res Subscription Name</th>
 <th class="uamiresaltbgc">Res Subscription Id</th>
 <th class="uamiresaltbgc">Res ResourceGroup</th>
 <th class="uamiresaltbgc">Res Id</th>
-<th class="uamiresaltbgc">Res count assigned MIs
+<th class="uamiresaltbgc">Res count assigned MIs</th>
 </tr>
 </thead>
 <tbody>
@@ -2200,6 +2201,7 @@ extensions: [{ name: 'sort' }]
     <td>$($miResEntry.miPrincipalId)</td>
     <td>$($miResEntry.miClientId)</td>
     <td>$($htUserAssignedIdentitiesAssignedResources.($miResEntry.miPrincipalId).ResourcesCount)</td>
+    <td>$($miResEntry.miCrossSubscription)</td>
     <td>$($miResEntry.resourceName)</td>
     <td class="breakwordall">$($miResEntry.resourceType)</td>
     <td>$($miResEntry.resourceMgPath)</td>
@@ -2248,7 +2250,8 @@ paging: {results_per_page: ['Records: ', [$spectrum]]},/*state: {types: ['local_
                 [void]$htmlScopeInsights.AppendLine(@"
                 btn_reset: true, highlight_keywords: true, alternate_rows: true, auto_filter: { delay: 1100 }, no_results_message: true,
                 linked_filters: true,
-                col_10: 'select',
+                col_9: 'select',
+                col_11: 'select',
                 col_types: [
                     'caseinsensitivestring',
                     'caseinsensitivestring',
@@ -2266,6 +2269,7 @@ paging: {results_per_page: ['Records: ', [$spectrum]]},/*state: {types: ['local_
                     'caseinsensitivestring',
                     'caseinsensitivestring',
                     'caseinsensitivestring',
+                    'caseinsensitivestring',
                     'number'
                 ],
                 extensions: [{ name: 'colsVisibility', text: 'Columns: ', enable_tick_all: true },{ name: 'sort' }]

diff --git a/pwsh/dev/functions/processTenantSummary.ps1 b/pwsh/dev/functions/processTenantSummary.ps1
@@ -8893,6 +8893,7 @@ extensions: [{ name: 'sort' }]
 <th>MI AAD SP objectId</th>
 <th>MI AAD SP applicationId</th>
 <th>MI count Res assignments</th>
+<th>MI used cross subscription</th>
 <th class="uamiresaltbgc">Res Name</th>
 <th class="uamiresaltbgc">Res Type</th>
 <th class="uamiresaltbgc">Res MgPath</th>
@@ -8922,6 +8923,7 @@ extensions: [{ name: 'sort' }]
                         <td>$($miResEntry.miPrincipalId)</td>
                         <td>$($miResEntry.miClientId)</td>
                         <td>$($htUserAssignedIdentitiesAssignedResources.($miResEntry.miPrincipalId).ResourcesCount)</td>
+                        <td>$($miResEntry.miCrossSubscription)</td>
                         <td>$($miResEntry.resourceName)</td>
                         <td class="breakwordall">$($miResEntry.resourceType)</td>
                         <td>$($miResEntry.resourceMgPath)</td>
@@ -8944,6 +8946,7 @@ extensions: [{ name: 'sort' }]
                             MIAADSPObjectId       = $miResEntry.miPrincipalId
                             MIAADSPApplicationId  = $miResEntry.miClientId
                             MICountResAssignments = $htUserAssignedIdentitiesAssignedResources.($miResEntry.miPrincipalId).ResourcesCount
+                            MICrossSubscription   = $miResEntry.miCrossSubscription
                             ResName               = $miResEntry.resourceName
                             ResType               = $miResEntry.resourceType
                             ResMgPath             = $miResEntry.resourceMgPath
@@ -8998,7 +9001,8 @@ paging: {results_per_page: ['Records: ', [$spectrum]]},/*state: {types: ['local_
             [void]$htmlTenantSummary.AppendLine(@"
 btn_reset: true, highlight_keywords: true, alternate_rows: true, auto_filter: { delay: 1100 }, no_results_message: true,
             linked_filters: true,
-            col_10: 'select',
+            col_9: 'select',
+            col_11: 'select',
             col_types: [
                 'caseinsensitivestring',
                 'caseinsensitivestring',
@@ -9016,6 +9020,7 @@ btn_reset: true, highlight_keywords: true, alternate_rows: true, auto_filter: {
                 'caseinsensitivestring',
                 'caseinsensitivestring',
                 'caseinsensitivestring',
+                'caseinsensitivestring',
                 'number'
             ],
             extensions: [{ name: 'colsVisibility', text: 'Columns: ', enable_tick_all: true },{ name: 'sort' }]

diff --git a/version.json b/version.json
@@ -1,3 +1,3 @@
 {
-  "ProductVersion": "6.2.3"
+  "ProductVersion": "6.3.0"
 }