Update README.md

.gitignore

@@ -1,10 +1,14 @@
 # ---> VisualStudioCode
+.vscode
 .vscode/*
 !.vscode/settings.json
 !.vscode/tasks.json
 !.vscode/launch.json
 !.vscode/extensions.json
 !.vscode/*.code-snippets
+.idea/*
+
+launchsettings.json
 
 # Local History for Visual Studio Code
 .history/

Azure.Endpoints/ResourceGroup/ActivityLogReader.cs

@@ -1,39 +1,75 @@
+using Azure;
+using Azure.Monitor.Query;
+using Azure.Monitor.Query.Models;
+using Azure.ResourceManager;
+using Azure.ResourceManager.Resources;
 using Microsoft.Extensions.Logging;
+using ProperDI.Azure.Endpoints.ResourceGroup.Models;
 
-namespace ProperDI.Azure.Endpoints.ResourceGroup.LogLooker;
+namespace ProperDI.Azure.Endpoints.ResourceGroup;
 
 public interface IActivityLogReader
 {
-    Task Scan(CancellationToken cancellationToken);
+    Task ScanAppAsync(string appName, CancellationToken cancellationToken, QueryTimeRange? givenTimeRange);
+    Task ScanAllAsync(CancellationToken cancellationToken);
 }
 
 public class ActivityLogReader : IActivityLogReader
 {
     private readonly ILogger<ActivityLogReader> _logger;
-    private readonly HttpClient _httpClient; 
+    private readonly ArmClient _armClient;
+    private readonly LogsQueryClient _logsQueryClient;
 
-    public ActivityLogReader(IHttpClientFactory httpClientFactory, ILogger<ActivityLogReader> logger)
+    public ActivityLogReader(ILogger<ActivityLogReader> logger, ArmClient armClient, LogsQueryClient logsQueryClient)
     {
-        _httpClient = httpClientFactory.CreateClient() ?? throw new ArgumentNullException(nameof(httpClientFactory));
         _logger = logger ?? throw new ArgumentNullException(nameof(logger));
+        _armClient = armClient ?? throw new ArgumentNullException(nameof(armClient));
+        _logsQueryClient = logsQueryClient ?? throw new ArgumentNullException(nameof(logsQueryClient));
     }
 
-    public async Task Scan(CancellationToken cancellationToken)
+    public async Task ScanAppAsync(string appName, CancellationToken cancellationToken, QueryTimeRange? givenTimeRange = default)
     {
+        var timeRange = givenTimeRange ?? new QueryTimeRange(DateTime.UtcNow.AddDays(-7), DateTime.UtcNow);
+        
         try
         {
-            var response = await _httpClient.GetAsync("https://ident.me", cancellationToken);
+            _logger.LogInformation("Scanning for resources");
-            var responseBody = await response.Content.ReadAsStringAsync();
+            await ScanLogsForAppActivityAsync();
-            _logger.LogInformation("Response body: {content}", responseBody);
         }
         catch (TaskCanceledException)
         {
             _logger.LogWarning("Task canceled");
         }
-        catch (System.Exception ex)
+        catch (Exception ex)
         {
             _logger.LogError(ex, "Http request failed");
             throw;
         }
-    } 
+    }
+
+    public async Task ScanAllAsync(CancellationToken cancellationToken)
+    {
+        throw new NotImplementedException();
+    }
+
+    public async Task ScanLogsForAppActivityAsync()
+    {
+    }
+
+
+    private async Task<SubscriptionResource> GetDefaultSubscriptionAsync(CancellationToken cancellationToken)
+    {
+        try
+        {
+            var sub = await _armClient.GetDefaultSubscriptionAsync(cancellationToken);
+
+            
+            return sub;
+        }
+        catch (Exception ex)
+        {
+            _logger.LogError(ex, "Failed to retrieve default subscription");
+            throw;
+        }
+    }
 }

Azure.Endpoints/ResourceGroup/Models/AppActivitySummary.cs

@@ -0,0 +1,3 @@
+namespace ProperDI.Azure.Endpoints.ResourceGroup.Models;
+
+public record AppActivitySummary(string AppName, string PermissionsExercised);

Azure.Endpoints/ResourceGroup/Models/TimeRange.cs

@@ -0,0 +1,3 @@
+namespace ProperDI.Azure.Endpoints.ResourceGroup.Models;
+
+public record TimeRange(DateTime Start, DateTime End);

BackgroundService/BackgroundService.cs

@@ -1,7 +1,7 @@
 using Microsoft.Extensions.Hosting;
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
-using ProperDI.Azure.Endpoints.ResourceGroup.LogLooker;
+using ProperDI.Azure.Endpoints.ResourceGroup;
 
 public class RoleAssesorBackgroundService : IHostedService, IDisposable
 {
@@ -57,7 +57,7 @@ public class RoleAssesorBackgroundService : IHostedService, IDisposable
             if (cancellationToken.IsCancellationRequested)
                 return;
 
-            await _activityLogReader.Scan(cancellationToken);    
+            await _activityLogReader.ScanAppAsync("Test", cancellationToken, null);    
         }
         catch (OperationCanceledException)
         {
@@ -81,6 +81,7 @@ public class RoleAssesorBackgroundService : IHostedService, IDisposable
 
     public void Dispose()
     {
+        GC.SuppressFinalize(this);
         _timer?.Dispose();
     }
 }

Program.cs

@@ -1,11 +1,26 @@
-using Microsoft.Extensions.DependencyInjection;
+using Azure.Identity;
+using Microsoft.Extensions.Azure;
+using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Hosting;
-using ProperDI.Azure.Endpoints.ResourceGroup.LogLooker;
+using ProperDI.Azure.Endpoints.ResourceGroup;
 
 HostApplicationBuilder builder = Host.CreateApplicationBuilder(args);
 
 builder.Services.AddHttpClient();
 builder.Services.AddTransient<IActivityLogReader, ActivityLogReader>();
+builder.Services.AddAzureClients(clientBuilder =>
+{
+    // var creds = new ClientSecretCredential(
+    //     "",
+    //     "",
+    //     "");
+    clientBuilder.UseCredential(new DefaultAzureCredential());
+    clientBuilder.AddArmClient(builder.Configuration.GetSection("Am95DevSubscriptionId"));
+    clientBuilder.ConfigureDefaults(client =>
+    {
+        client.Retry.MaxRetries = 3;
+    });
+});
 
 builder.Services.Configure<RoleAssesorBackgroundServiceOptions>(builder.Configuration.GetSection("RoleAssessorBackgroundService"));
 builder.Services.AddHostedService<RoleAssesorBackgroundService>();

README.md

@@ -1,3 +1,3 @@
 # Sentinel
 
-Watches over the land and smites and rogue roles!
+Watches over the land and smites any rogue roles!

Sentinel.csproj

@@ -8,6 +8,11 @@
   </PropertyGroup>
 
   <ItemGroup>
+    <PackageReference Include="Azure.Identity" Version="1.12.1" />
+    <PackageReference Include="Azure.Monitor.Query" Version="1.5.0" />
+    <PackageReference Include="Azure.ResourceManager" Version="1.13.0" />
+    <PackageReference Include="Azure.ResourceManager.Resources" Version="1.9.0" />
+    <PackageReference Include="Microsoft.Extensions.Azure" Version="1.7.6" />
     <PackageReference Include="Microsoft.Extensions.DependencyInjection" Version="8.0.1" />
     <PackageReference Include="Microsoft.Extensions.Hosting" Version="8.0.1" />
     <PackageReference Include="Microsoft.Extensions.Http" Version="8.0.1" />

Sentinel.sln

@@ -0,0 +1,25 @@
+
+Microsoft Visual Studio Solution File, Format Version 12.00
+# Visual Studio Version 17
+VisualStudioVersion = 17.11.35327.3
+MinimumVisualStudioVersion = 10.0.40219.1
+Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Sentinel", "Sentinel.csproj", "{FA937A3C-5191-4DAC-AC62-EBF7EE90BD1F}"
+EndProject
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Release|Any CPU = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(ProjectConfigurationPlatforms) = postSolution
+		{FA937A3C-5191-4DAC-AC62-EBF7EE90BD1F}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{FA937A3C-5191-4DAC-AC62-EBF7EE90BD1F}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{FA937A3C-5191-4DAC-AC62-EBF7EE90BD1F}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{FA937A3C-5191-4DAC-AC62-EBF7EE90BD1F}.Release|Any CPU.Build.0 = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+	GlobalSection(ExtensibilityGlobals) = postSolution
+		SolutionGuid = {79EE9B52-D46E-4FBB-8310-32FD5835CF1D}
+	EndGlobalSection
+EndGlobal

appsettings.json

@@ -1,13 +1,22 @@
 {
-    "Logging": {
+  "Logging": {
-        "LogLevel": {
+    "LogLevel": {
-            "Default": "Information",
+      "Default": "Information",
-            "Microsoft": "Warning",
+      "Microsoft": "Warning",
-            "Microsoft.Hosting.Lifetime": "Information",
+      "Microsoft.Hosting.Lifetime": "Information",
-            "System.Net": "Warning"
+      "System.Net": "Warning",
-        }
+      "Azure.Core": "Warning",
-    },
+      "Azure.Identity": "Warning"
-    "RoleAssessorBackgroundService": {
-        "RunFrequencyInMinutes": 1
     }
+  },
+  "RoleAssessorBackgroundService": {
+    "RunFrequencyInMinutes": 12
+  },
+  "Am95DevSubscriptionId": "040698c2-a013-45be-b1fa-e975f46b9d63",
+  "DefaultSubscriptionId": "2690a5f1-155b-4fa8-896f-92c6bcb62bee",
+  "ASPNETCORE_ENVIRONMENT": "Development",
+  "AzureSubscriptionId": "2690a5f1-155b-4fa8-896f-92c6bcb62bee",
+  "AzureTenantId": "11ffe5d3-5e72-4414-8dfd-1eb209497679",
+  "AzureClientId": "d0870778-24dd-4c87-a449-2c36674035d1",
+  "AzureClientSecret": "EWX8Q~jpfKab8hB1TzujorzKIeJEV5NKEfCuOaFC"
 }