andrewmatveychuk

{
  "KeyVault": {
    "vaultUri": "https://kv-4zdnwe1wgbwdp.vault.azure.net", // Your Key Vault URI
    "credential": "managedidentity" // Using the system-assigned managed identity of your Azure Arc-enabled server
  }
}

andrewmatveychuk

{
  "KeyVault": {
    "vaultUri": "https://kv-4zdnwe1wgbwdp.vault.azure.net" // Your Key Vault URI
  }
}

andrewmatveychuk

{
  "KeyVault": {
    "vaultUri": "https://kv-4zdnwe1wgbwdp.vault.azure.net", // Your Key Vault URI
    "tenantId": "3f5ed419-0e1b-4f47-8f94-a5b9fa4f298e", // Your Azure tenant ID
    "clientId": "76a95e90-ec2c-4d59-b92b-9c5b8316cff4", // Your app registration in the tenant
    "clientCertificate": "5378d04cd9a86a6cde595478d664cc9e2f755d4b", // That should be your unique certificate thumbprint
    "clientCertificateStoreLocation": "LocalMachine" // The certificate store name, which should be 'CurrentUser' or 'LocalMachine'
  }
}

andrewmatveychuk

// Extracts from a sample .NET Worker Service project

// You can add your target Azure resources in the Program.cs file using the 'AddAzureClients' method and extension methods from corresponding Azure services client libraries
// ...
var builder = Host.CreateApplicationBuilder(args);

builder.Services.AddAzureClients(clientBuilder => clientBuilder.AddSecretClient(builder.Configuration.GetSection("KeyVault")));
// ...

// Then you can 'inject' your Azure client into the Worker object (the Worker.cs file) and use them in your task

andrewmatveychuk

using Azure.Identity;
using Azure.Security.KeyVault.Secrets;

var keyVaultName = Environment.GetEnvironmentVariable("KEY_VAULT_NAME"); // Getting the Key Vault name from an environment variable

if (keyVaultName is not null) // Checking if the environment variable is set
{
    Console.WriteLine($"Key Vault name: {keyVaultName}");

    var keyVaultUri = "https://" + keyVaultName + ".vault.azure.net";

andrewmatveychuk

using System.Security.Cryptography;
using System.Security.Cryptography.X509Certificates;
using Azure.Identity;
using Azure.Security.KeyVault.Secrets;

string keyVaultName = "kv-4zdnwe1wgbwdp"; // The name of the Key Vault you want to access
var keyVaultUri = "https://" + keyVaultName + ".vault.azure.net"; // The Key Vault URI
string tenantId = "3f5ed419-0e1b-4f47-8f94-a5b9fa4f298e"; // Your Azure tenant ID
string clientId = "76a95e90-ec2c-4d59-b92b-9c5b8316cff4"; // Your app registration in the tenant
string certificateThumbprint = "5378d04cd9a86a6cde595478d664cc9e2f755d4b"; // That should be your unique certificate thumbprint

andrewmatveychuk

#region LogEntry class definition
# Defining your custom categories using enum type
enum OperationResultList : byte {
    Disabled
    Deleted
    Detected
}

# Defining your custom PowerShell class for log entries
class LogEntry {

andrewmatveychuk

enum OperationResultList : byte {
    Disabled
    Deleted
    Detected
}

class LogEntry {
    [OperationResultList] $OperationResult
    [ValidateNotNullOrEmpty()] [string] $OperationDetails

andrewmatveychuk

function New-LogEntry {
    <#
.SYNOPSIS
    Push a new log entry(s) to a Data Collection Endpoint
.DESCRIPTION
    The New-LogEntry cmdlet sends provided JSON payload to the target Data Collection Endpoint
    to be processed by Data Collection Rule and logged to an underlying Log Analytics workspace
.PARAMETER DceEndpoint
    Data collection endpoint (DCE) to send collected data for processing and ingestion into Azure Monitor
.PARAMETER DcrImmutableId

andrewmatveychuk

#region Creating your log entries
$logEntry1  = [PSCustomObject]@{
    OperationResult = 'Disabled'
    OperationDetails = 'Some operation details goes here...'
}

$logEntry2  = [PSCustomObject]@{
    OperationResult = 'Deleted'
    OperationDetails = 'Some operation details goes here...'
}