ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-24 04:51:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: create the Graph Service client different when is not standar Azure Cloud

Browse Source
This commit is contained in:
Rubén De la Torre Vico
2025-03-19 10:41:56 +01:00
parent eb67e381cf
commit fc3275f0a8
1 changed files with 42 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
prowler/providers/azure/azure_provider.py
+42 -7
View File
@@ -20,7 +20,8 @@ from colorama import Fore, Style
from kiota_authentication_azure.azure_identity_authentication_provider import (
AzureIdentityAuthenticationProvider,
)
from msgraph import GraphServiceClient
from msgraph import GraphRequestAdapter, GraphServiceClient
from msgraph_core import GraphClientFactory
from prowler.config.config import (
default_config_file_path,
@@ -903,13 +904,24 @@ class AzureProvider(Provider):
)
else:
auth_provider = AzureIdentityAuthenticationProvider(
self.credential,
credentials,
scopes=[self.region_config.graph_credential_scopes],
allowed_hosts=[self.region_config.graph_base_url],
allowed_hosts=[
self.region_config.graph_base_url.replace(
"http://", ""
).replace("https://", "")
],
)
http_client = GraphClientFactory.create_with_default_middleware(
host=self.region_config.graph_base_url
)
adapter = GraphRequestAdapter(
auth_provider=auth_provider, client=http_client
)
adapter.base_url = self.region_config.graph_base_url
client = GraphServiceClient(
request_adapter=adapter,
)
domain_result = await client.domains.get()
if getattr(domain_result, "value"):
@@ -950,10 +962,33 @@ class AzureProvider(Provider):
logger.info(
"Trying to retrieve user information from Microsoft Graph to populate identity structure ..."
)
client = GraphServiceClient(
credentials=credentials,
scopes=self.region_config.graph_credential_scopes,
)
if self.region_config.name == "AzureCloud":
client = GraphServiceClient(
credentials=credentials,
scopes=self.region_config.graph_credential_scopes,
)
else:
auth_provider = AzureIdentityAuthenticationProvider(
credentials,
scopes=[self.region_config.graph_credential_scopes],
allowed_hosts=[
self.region_config.graph_base_url.replace(
"http://", ""
).replace("https://", "")
],
)
http_client = (
GraphClientFactory.create_with_default_middleware(
host=self.region_config.graph_base_url
)
)
adapter = GraphRequestAdapter(
auth_provider=auth_provider, client=http_client
)
adapter.base_url = self.region_config.graph_base_url
client = GraphServiceClient(
request_adapter=adapter,
)
me = await client.me.get()
if me: