cartography 0.104.0rc2__py3-none-any.whl → 0.123.0__py3-none-any.whl

cartography/models/azure/load_balancer/load_balancer_backend_pool.py

@@ -0,0 +1,73 @@
+import logging
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+logger = logging.getLogger(__name__)
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerBackendPoolProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    name: PropertyRef = PropertyRef("name")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerBackendPoolToLBRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerBackendPoolToLBRel(CartographyRelSchema):
+    target_node_label: str = "AzureLoadBalancer"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("LOAD_BALANCER_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "CONTAINS"
+    properties: AzureLoadBalancerBackendPoolToLBRelProperties = (
+        AzureLoadBalancerBackendPoolToLBRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerBackendPoolToSubscriptionRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerBackendPoolToSubscriptionRel(CartographyRelSchema):
+    target_node_label: str = "AzureSubscription"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AZURE_SUBSCRIPTION_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: AzureLoadBalancerBackendPoolToSubscriptionRelProperties = (
+        AzureLoadBalancerBackendPoolToSubscriptionRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerBackendPoolSchema(CartographyNodeSchema):
+    label: str = "AzureLoadBalancerBackendPool"
+    properties: AzureLoadBalancerBackendPoolProperties = (
+        AzureLoadBalancerBackendPoolProperties()
+    )
+    sub_resource_relationship: AzureLoadBalancerBackendPoolToSubscriptionRel = (
+        AzureLoadBalancerBackendPoolToSubscriptionRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            AzureLoadBalancerBackendPoolToLBRel(),
+        ],
+    )

cartography/models/azure/load_balancer/load_balancer_frontend_ip.py

@@ -0,0 +1,75 @@
+import logging
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+logger = logging.getLogger(__name__)
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerFrontendIPProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    name: PropertyRef = PropertyRef("name")
+    private_ip_address: PropertyRef = PropertyRef("private_ip_address")
+    public_ip_address_id: PropertyRef = PropertyRef("public_ip_address_id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerFrontendIPToLBRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerFrontendIPToLBRel(CartographyRelSchema):
+    target_node_label: str = "AzureLoadBalancer"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("LOAD_BALANCER_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "CONTAINS"
+    properties: AzureLoadBalancerFrontendIPToLBRelProperties = (
+        AzureLoadBalancerFrontendIPToLBRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerFrontendIPToSubscriptionRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerFrontendIPToSubscriptionRel(CartographyRelSchema):
+    target_node_label: str = "AzureSubscription"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AZURE_SUBSCRIPTION_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: AzureLoadBalancerFrontendIPToSubscriptionRelProperties = (
+        AzureLoadBalancerFrontendIPToSubscriptionRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerFrontendIPSchema(CartographyNodeSchema):
+    label: str = "AzureLoadBalancerFrontendIPConfiguration"
+    properties: AzureLoadBalancerFrontendIPProperties = (
+        AzureLoadBalancerFrontendIPProperties()
+    )
+    sub_resource_relationship: AzureLoadBalancerFrontendIPToSubscriptionRel = (
+        AzureLoadBalancerFrontendIPToSubscriptionRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            AzureLoadBalancerFrontendIPToLBRel(),
+        ]
+    )

cartography/models/azure/load_balancer/load_balancer_inbound_nat_rule.py

@@ -0,0 +1,78 @@
+import logging
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+logger = logging.getLogger(__name__)
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerInboundNatRuleProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    name: PropertyRef = PropertyRef("name")
+    protocol: PropertyRef = PropertyRef("protocol")
+    frontend_port: PropertyRef = PropertyRef("frontend_port")
+    backend_port: PropertyRef = PropertyRef("backend_port")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerInboundNatRuleToLBRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerInboundNatRuleToLBRel(CartographyRelSchema):
+    target_node_label: str = "AzureLoadBalancer"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("LOAD_BALANCER_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "CONTAINS"
+    properties: AzureLoadBalancerInboundNatRuleToLBRelProperties = (
+        AzureLoadBalancerInboundNatRuleToLBRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerInboundNatRuleToSubscriptionRelProperties(
+    CartographyRelProperties
+):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerInboundNatRuleToSubscriptionRel(CartographyRelSchema):
+    target_node_label: str = "AzureSubscription"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AZURE_SUBSCRIPTION_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: AzureLoadBalancerInboundNatRuleToSubscriptionRelProperties = (
+        AzureLoadBalancerInboundNatRuleToSubscriptionRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerInboundNatRuleSchema(CartographyNodeSchema):
+    label: str = "AzureLoadBalancerInboundNatRule"
+    properties: AzureLoadBalancerInboundNatRuleProperties = (
+        AzureLoadBalancerInboundNatRuleProperties()
+    )
+    sub_resource_relationship: AzureLoadBalancerInboundNatRuleToSubscriptionRel = (
+        AzureLoadBalancerInboundNatRuleToSubscriptionRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            AzureLoadBalancerInboundNatRuleToLBRel(),
+        ]
+    )

cartography/models/azure/load_balancer/load_balancer_rule.py

@@ -0,0 +1,108 @@
+import logging
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+logger = logging.getLogger(__name__)
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerRuleProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    name: PropertyRef = PropertyRef("name")
+    protocol: PropertyRef = PropertyRef("protocol")
+    frontend_port: PropertyRef = PropertyRef("frontend_port")
+    backend_port: PropertyRef = PropertyRef("backend_port")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerRuleToLBRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerRuleToLBRel(CartographyRelSchema):
+    target_node_label: str = "AzureLoadBalancer"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("LOAD_BALANCER_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "CONTAINS"
+    properties: AzureLoadBalancerRuleToLBRelProperties = (
+        AzureLoadBalancerRuleToLBRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerRuleToSubscriptionRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerRuleToSubscriptionRel(CartographyRelSchema):
+    target_node_label: str = "AzureSubscription"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AZURE_SUBSCRIPTION_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: AzureLoadBalancerRuleToSubscriptionRelProperties = (
+        AzureLoadBalancerRuleToSubscriptionRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class RuleToFrontendIPRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class RuleToFrontendIPRel(CartographyRelSchema):
+    target_node_label: str = "AzureLoadBalancerFrontendIPConfiguration"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("FRONTEND_IP_ID")}
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "USES_FRONTEND_IP"
+    properties: RuleToFrontendIPRelProperties = RuleToFrontendIPRelProperties()
+
+
+@dataclass(frozen=True)
+class RuleToBackendPoolRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class RuleToBackendPoolRel(CartographyRelSchema):
+    target_node_label: str = "AzureLoadBalancerBackendPool"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("BACKEND_POOL_ID")}
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "ROUTES_TO"
+    properties: RuleToBackendPoolRelProperties = RuleToBackendPoolRelProperties()
+
+
+@dataclass(frozen=True)
+class AzureLoadBalancerRuleSchema(CartographyNodeSchema):
+    label: str = "AzureLoadBalancerRule"
+    properties: AzureLoadBalancerRuleProperties = AzureLoadBalancerRuleProperties()
+    sub_resource_relationship: AzureLoadBalancerRuleToSubscriptionRel = (
+        AzureLoadBalancerRuleToSubscriptionRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            AzureLoadBalancerRuleToLBRel(),
+            RuleToFrontendIPRel(),
+            RuleToBackendPoolRel(),
+        ],
+    )

cartography/models/azure/logic_apps.py

@@ -0,0 +1,56 @@
+import logging
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+logger = logging.getLogger(__name__)
+
+
+# --- Node Definitions ---
+@dataclass(frozen=True)
+class AzureLogicAppProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    name: PropertyRef = PropertyRef("name")
+    location: PropertyRef = PropertyRef("location")
+    state: PropertyRef = PropertyRef("state")
+    created_time: PropertyRef = PropertyRef("createdTime")
+    changed_time: PropertyRef = PropertyRef("changedTime")
+    version: PropertyRef = PropertyRef("version")
+    access_endpoint: PropertyRef = PropertyRef("accessEndpoint")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+# --- Relationship Definitions ---
+@dataclass(frozen=True)
+class AzureLogicAppToSubscriptionRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzureLogicAppToSubscriptionRel(CartographyRelSchema):
+    target_node_label: str = "AzureSubscription"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AZURE_SUBSCRIPTION_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: AzureLogicAppToSubscriptionRelProperties = (
+        AzureLogicAppToSubscriptionRelProperties()
+    )
+
+
+# --- Main Schema ---
+@dataclass(frozen=True)
+class AzureLogicAppSchema(CartographyNodeSchema):
+    label: str = "AzureLogicApp"
+    properties: AzureLogicAppProperties = AzureLogicAppProperties()
+    sub_resource_relationship: AzureLogicAppToSubscriptionRel = (
+        AzureLogicAppToSubscriptionRel()
+    )

cartography/models/azure/monitor.py

@@ -0,0 +1,54 @@
+import logging
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+logger = logging.getLogger(__name__)
+
+
+@dataclass(frozen=True)
+class AzureMonitorMetricAlertProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    name: PropertyRef = PropertyRef("name")
+    location: PropertyRef = PropertyRef("location")
+    description: PropertyRef = PropertyRef("description")
+    severity: PropertyRef = PropertyRef("severity")
+    enabled: PropertyRef = PropertyRef("enabled")
+    window_size: PropertyRef = PropertyRef("window_size")
+    evaluation_frequency: PropertyRef = PropertyRef("evaluation_frequency")
+    last_updated_time: PropertyRef = PropertyRef("last_updated_time")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzureSubscriptionToMetricAlertRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzureSubscriptionToMetricAlertRel(CartographyRelSchema):
+    target_node_label: str = "AzureSubscription"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AZURE_SUBSCRIPTION_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_METRIC_ALERT"
+    properties: AzureSubscriptionToMetricAlertRelProperties = (
+        AzureSubscriptionToMetricAlertRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AzureMonitorMetricAlertSchema(CartographyNodeSchema):
+    label: str = "AzureMonitorMetricAlert"
+    properties: AzureMonitorMetricAlertProperties = AzureMonitorMetricAlertProperties()
+    sub_resource_relationship: AzureSubscriptionToMetricAlertRel = (
+        AzureSubscriptionToMetricAlertRel()
+    )

cartography/models/azure/network_interface.py

@@ -0,0 +1,112 @@
+import logging
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+logger = logging.getLogger(__name__)
+
+
+@dataclass(frozen=True)
+class AzureNetworkInterfaceProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    name: PropertyRef = PropertyRef("name")
+    location: PropertyRef = PropertyRef("location")
+    mac_address: PropertyRef = PropertyRef("mac_address")
+    private_ip_addresses: PropertyRef = PropertyRef("private_ip_addresses")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzureNetworkInterfaceToSubscriptionRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzureNetworkInterfaceToSubscriptionRel(CartographyRelSchema):
+    target_node_label: str = "AzureSubscription"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AZURE_SUBSCRIPTION_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: AzureNetworkInterfaceToSubscriptionRelProperties = (
+        AzureNetworkInterfaceToSubscriptionRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AzureNetworkInterfaceToVirtualMachineRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzureNetworkInterfaceToVirtualMachineRel(CartographyRelSchema):
+    target_node_label: str = "AzureVirtualMachine"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("VIRTUAL_MACHINE_ID")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "ATTACHED_TO"
+    properties: AzureNetworkInterfaceToVirtualMachineRelProperties = (
+        AzureNetworkInterfaceToVirtualMachineRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AzureNetworkInterfaceToSubnetRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzureNetworkInterfaceToSubnetRel(CartographyRelSchema):
+    target_node_label: str = "AzureSubnet"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("SUBNET_IDS", one_to_many=True)},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "ATTACHED_TO"
+    properties: AzureNetworkInterfaceToSubnetRelProperties = (
+        AzureNetworkInterfaceToSubnetRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AzureNetworkInterfaceToPublicIPRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzureNetworkInterfaceToPublicIPRel(CartographyRelSchema):
+    target_node_label: str = "AzurePublicIPAddress"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("PUBLIC_IP_IDS", one_to_many=True)},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "ASSOCIATED_WITH"
+    properties: AzureNetworkInterfaceToPublicIPRelProperties = (
+        AzureNetworkInterfaceToPublicIPRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AzureNetworkInterfaceSchema(CartographyNodeSchema):
+    label: str = "AzureNetworkInterface"
+    properties: AzureNetworkInterfaceProperties = AzureNetworkInterfaceProperties()
+    sub_resource_relationship: AzureNetworkInterfaceToSubscriptionRel = (
+        AzureNetworkInterfaceToSubscriptionRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            AzureNetworkInterfaceToVirtualMachineRel(),
+            AzureNetworkInterfaceToSubnetRel(),
+            AzureNetworkInterfaceToPublicIPRel(),
+        ],
+    )

cartography/models/azure/network_security_group.py

@@ -0,0 +1,50 @@
+import logging
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+logger = logging.getLogger(__name__)
+
+
+@dataclass(frozen=True)
+class AzureNetworkSecurityGroupProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    name: PropertyRef = PropertyRef("name")
+    location: PropertyRef = PropertyRef("location")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzureNetworkSecurityGroupToSubscriptionRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzureNetworkSecurityGroupToSubscriptionRel(CartographyRelSchema):
+    target_node_label: str = "AzureSubscription"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AZURE_SUBSCRIPTION_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: AzureNetworkSecurityGroupToSubscriptionRelProperties = (
+        AzureNetworkSecurityGroupToSubscriptionRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AzureNetworkSecurityGroupSchema(CartographyNodeSchema):
+    label: str = "AzureNetworkSecurityGroup"
+    properties: AzureNetworkSecurityGroupProperties = (
+        AzureNetworkSecurityGroupProperties()
+    )
+    sub_resource_relationship: AzureNetworkSecurityGroupToSubscriptionRel = (
+        AzureNetworkSecurityGroupToSubscriptionRel()
+    )

cartography/models/azure/permission_relationships.py

@@ -0,0 +1,60 @@
+"""
+Azure permission relationship MatchLink schemas.
+"""
+
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_source_node_matcher
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import SourceNodeMatcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class AzurePermissionRelProperties(CartographyRelProperties):
+    """
+    Properties for Azure permission relationships.
+    """
+
+    # Required fields for MatchLinks
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    _sub_resource_label: PropertyRef = PropertyRef(
+        "_sub_resource_label", set_in_kwargs=True
+    )
+    _sub_resource_id: PropertyRef = PropertyRef("_sub_resource_id", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzurePermissionMatchLink(CartographyRelSchema):
+    """
+    MatchLink schema for Azure permission relationships.
+    Creates relationships like: (EntraUser|EntraGroup|EntraServicePrincipal)-[:CAN_READ]->(AzureResource)
+
+    This MatchLink handles permission relationships between Azure principals and resources
+    based on RBAC assignments and permission evaluations.
+    """
+
+    # MatchLink-specific fields
+    source_node_label: str = (
+        "EntraPrincipal"  # Covers EntraUser, EntraGroup, EntraServicePrincipal
+    )
+    source_node_matcher: SourceNodeMatcher = make_source_node_matcher(
+        {"id": PropertyRef("principal_id")},
+    )
+
+    # Standard CartographyRelSchema fields
+    target_node_label: str = (
+        "AzureResource"  # Will be dynamically set based on target_label
+    )
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("resource_id")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = (
+        "HAS_PERMISSION"  # Will be dynamically set based on relationship_name
+    )
+    properties: AzurePermissionRelProperties = AzurePermissionRelProperties()