Skip to content

Commit 1b6710a

Browse files
committed
Remove queries
1 parent b81e653 commit 1b6710a

File tree

1 file changed

+0
-88
lines changed

1 file changed

+0
-88
lines changed

categories/13-azure-keyvault.json

-88
Original file line numberDiff line numberDiff line change
@@ -1,88 +0,0 @@
1-
{
2-
"name": "Find all principals with a path to a Key Vault that has an MI with an Entra ID role",
3-
"category": "Azure - Key Vault",
4-
"queryList": [
5-
{
6-
"final": true,
7-
"query": "MATCH (node) WHERE (node:_VAR_all-security-principals-excluding-built-in) MATCH p=(node)-[r*1..3]->(:AZKeyVault)-[:AZManagedIdentity]-(n1)-[:AZHasRole]->(n2) RETURN p",
8-
"allowCollapse": true
9-
}
10-
]
11-
}
12-
{
13-
"name": "Find all principals with a path to a Key Vault that has an MI with a Tier-0 application permission",
14-
"category": "Azure - Key Vault",
15-
"queryList": [
16-
{
17-
"final": true,
18-
"query": "MATCH (node) WHERE (node:_VAR_all-security-principals-excluding-built-in) MATCH p=(node)-[r*1..3]->(:AZKeyVault)-[:AZManagedIdentity]-(n1)-[t0:_VAR_all-entra-app-permissions-in-t0]->(n2) RETURN p",
19-
"allowCollapse": true
20-
}
21-
]
22-
}
23-
{
24-
"name": "Find all principals with a path to a Key Vault that has an MI with a Tier-1 application permission",
25-
"category": "Azure - Key Vault",
26-
"queryList": [
27-
{
28-
"final": true,
29-
"query": "MATCH (node) WHERE (node:_VAR_all-security-principals-excluding-built-in) MATCH p=(node)-[r*1..3]->(:AZKeyVault)-[:AZManagedIdentity]-(n1)-[t1:_VAR_all-entra-app-permissions-in-t1]->(n2) RETURN p",
30-
"allowCollapse": true
31-
}
32-
]
33-
}
34-
{
35-
"name": "Find all principals with a path to a Key Vault that has an MI with a Tier-0 Azure role",
36-
"category": "Azure - Key Vault",
37-
"queryList": [
38-
{
39-
"final": true,
40-
"query": "MATCH (node) WHERE (node:_VAR_all-security-principals-excluding-built-in) MATCH p=(node)-[r*1..3]->(:AZKeyVault)-[:AZManagedIdentity]-(n2)-[t0:_VAR_all-az-roles-in-t0]->(n3) RETURN p",
41-
"allowCollapse": true
42-
}
43-
]
44-
}
45-
{
46-
"name": "Find all Key Vaults with an MI that has permissions on Management Groups",
47-
"category": "Azure - Key Vault",
48-
"queryList": [
49-
{
50-
"final": true,
51-
"query": "MATCH p = (:AZKeyVault)-[:AZManagedIdentity]-(n)-[r]->(:AZManagementGroup) RETURN p",
52-
"allowCollapse": true
53-
}
54-
]
55-
}
56-
{
57-
"name": "Find all Key Vaults with an MI that has permissions on Subscriptions",
58-
"category": "Azure - Key Vault",
59-
"queryList": [
60-
{
61-
"final": true,
62-
"query": "MATCH p = (:AZKeyVault)-[:AZManagedIdentity]-(n)-[r]->(:AZSubscription) RETURN p",
63-
"allowCollapse": true
64-
}
65-
]
66-
}
67-
{
68-
"name": "Find all Key Vaults with an MI that has permissions on Resource Groups",
69-
"category": "Azure - Key Vault",
70-
"queryList": [
71-
{
72-
"final": true,
73-
"query": "MATCH p = (:AZKeyVault)-[:AZManagedIdentity]-(n)-[r]->(:AZResourceGroup) RETURN p",
74-
"allowCollapse": true
75-
}
76-
]
77-
}
78-
{
79-
"name": "Find all Key Vaults with an MI that has permissions on individual resources",
80-
"category": "Azure - Key Vault",
81-
"queryList": [
82-
{
83-
"final": true,
84-
"query": "MATCH (node) WHERE (node:_VAR_all-az-resources) MATCH p = (:AZKeyVault)-[:AZManagedIdentity]-(n)-[r]->(node) RETURN p",
85-
"allowCollapse": true
86-
}
87-
]
88-
}

0 commit comments

Comments
 (0)