在 Azure 资源图资源管理器中创建联接

问题描述

我一直试图将这两个查询连接在一起，但我尝试的任何操作都失败了。我已经到了这一步，但老实说，我认为我已经超出了我目前的深度。

securityresources
| where type == "microsoft.security/assessments"
| project
 ['TenantID'] = tenantId,['SubscriptionID'] = subscriptionId,['AssessmentID'] = name,['displayName'] = properties.displayName,['ResourceType'] = tolower(split(properties.resourceDetails.Id,"/").[7]),['ResourceName'] = tolower(split(properties.resourceDetails.Id,"/").[8]),['ResourceGroup'] = resourceGroup,['ContainsnestedRecom'] = tostring(properties.additionalData.subAssessmentsLink),['StatusCode'] = properties.status.code,['StatusDescription'] = properties.status.description,['PolicyDefID'] = properties.Metadata.policyDeFinitionId,['Description'] = properties.Metadata.description,['RecomType'] = properties.Metadata.assessmentType,['Remediation'] = properties.Metadata.remediationDescription,['Severity'] = properties.Metadata.severity,['Link'] = properties.links.azurePortal
| join kind=inner (
    policyresources
| where type =~ "microsoft.policyinsights/policystates"
| project 
 ['PolicyDefID'] = properties.policyDeFinitionId,['PolicyScope'] = properties.policyAssignmentScope,['PolicyAssignmentID'] = properties.policyAssignmentId
)
on PolicyDefID
| project-away PolicyDefID1

对我在这里做错了什么有什么建议吗？显然受到 Resource Graph Explorer 中允许的 KQL 的限制。

谢谢

解决方法

暂无找到可以解决该程序问题的有效方法，小编努力寻找整理中！

如果你已经找到好的解决方法，欢迎将解决方案带上本链接一起发送给小编。

小编邮箱:dio#foxmail.com (将#修改为@）

azure-resource-graph kql