[GA] Agari CCF Data Connector - #14960
Conversation
|
@microsoft-github-policy-service agree company="Microsoft" |
| } | ||
| ] | ||
| }, | ||
| "Custom-AgariAPRInvestigationsLog_CL": { |
There was a problem hiding this comment.
This appears to be a breaking change. if we're going to remove this entire stream, we'd need to rename the DCR and do a minor version bump of the connector.
Have we tested to see if upgrading from 3.0.0 -> 3.0.1 (candidate) would work in place?
There was a problem hiding this comment.
Pull request overview
Note
Copilot was unable to run its full agentic suite in this review.
Promotes the Agari CCF Data Connector to GA by bumping solution/connector versions, updating connector metadata to non-preview, and adjusting the connector UX/config to focus on BP/APD streams.
Changes:
- Bump solution and connector versions to 3.0.1 and add release note entry.
- Mark connector as GA (
isPreview: false) and update description/queries to remove APR coverage. - Refactor connector instructions/config for multi-tenant connections, adding
friendlyNameand renamingenabledPollers→dataStream.
Reviewed changes
Copilot reviewed 7 out of 8 changed files in this pull request and generated 14 comments.
Show a summary per file
| File | Description |
|---|---|
| Solutions/Agari/ReleaseNotes.md | Adds 3.0.1 release entry for GA promotion. |
| Solutions/Agari/Package/mainTemplate.json | Version bump + GA metadata + instruction/config/template refactor. |
| Solutions/Agari/Data/Solution_Agari.json | Updates packaged solution version to 3.0.1. |
| Solutions/Agari/Data Connectors/Agari_CCF/table_AgariAPRInvestigationsLog.json | Removes APR investigations table definition. |
| Solutions/Agari/Data Connectors/Agari_CCF/Agari_PollingConfig.json | Updates poller definitions for friendlyName and dataStream. |
| Solutions/Agari/Data Connectors/Agari_CCF/Agari_DCR.json | Removes APR stream from DCR inputs/transformations. |
| Solutions/Agari/Data Connectors/Agari_CCF/Agari_ConnectorDefinition.json | Marks GA + updates UX instructions/queries to remove APR and support multi-tenant connections. |
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
| }, | ||
| { | ||
| "name": "[[concat(parameters('innerWorkspace'),'/Microsoft.SecurityInsights/', 'BPAlertsPoller', parameters('guidValue'))]", | ||
| "name": "[[concat('parameters('workspace')', '/Microsoft.SecurityInsights/','AgariBPAlertsLog_CL' , uniqueString(parameters('friendlyName')) )]", |
| }, | ||
| { | ||
| "name": "[[concat(parameters('innerWorkspace'),'/Microsoft.SecurityInsights/', 'APDPolicyPoller', parameters('guidValue'))]", | ||
| "name": "[[concat('parameters('workspace')', '/Microsoft.SecurityInsights/','AgariAPDPolicyLog_CL' , uniqueString(parameters('friendlyName')) )]", |
| }, | ||
| { | ||
| "name": "[[concat(parameters('innerWorkspace'),'/Microsoft.SecurityInsights/', 'APDThreatCategoriesPoller', parameters('guidValue'))]", | ||
| "name": "[[concat('parameters('workspace')', '/Microsoft.SecurityInsights/','AgariAPDTCLog_CL' , uniqueString(parameters('friendlyName')) )]", |
| }, | ||
| { | ||
| "name": "[[concat(parameters('innerWorkspace'),'/Microsoft.SecurityInsights/', 'BPThreatFeedSubmissionsPoller', parameters('guidValue'))]", | ||
| "name": "[[concat('parameters('workspace')', '/Microsoft.SecurityInsights/','AgariBPThreatFeedSubs_CL' , uniqueString(parameters('friendlyName')) )]", |
| "type": "Microsoft.SecurityInsights/dataConnectors", | ||
| "apiVersion": "2024-09-01", | ||
| "name": "BPAlertsPoller", | ||
| "name": "[[concat('parameters('workspace')', '/Microsoft.SecurityInsights/','AgariBPAlertsLog_CL' , uniqueString(parameters('friendlyName')) )]", |
| "dataCollectionRuleImmutableId": "{{dataCollectionRuleImmutableId}}" | ||
| }, | ||
| "addOnAttributes": { | ||
| "friendlyName": "[[parameters('friendlyName')]" |
| }, | ||
| "friendlyName": { | ||
| "defaultValue": "friendlyName", | ||
| "type": "securestring", |
| { | ||
| "type": "Dropdown", | ||
| "parameters": { | ||
| "label": "Data Stream", |
| "text": "Brand Protection Threat Feed URL Submissions (IoC)" | ||
| } | ||
| ], | ||
| "isMultiSelect": true, |
| { | ||
| "key": "APRInvestigations", | ||
| "text": "Phishing Response Investigation Attachments" | ||
| "columnName": "API URL", |
Change(s):
Promote connector to GA (Generally Available)
Reason for Change(s):
The connector is ready for promotion to GA
Version Updated:
3.0.1 Patch
Testing Completed: Yes
Checked that the validations are passing and have addressed any issues that are present: Yes