cartography 0.104.0rc2__py3-none-any.whl → 0.123.0__py3-none-any.whl

cartography/models/core/nodes.py

@@ -91,7 +91,7 @@ class CartographyNodeSchema(abc.ABC):
         """
         Optional.
         Allows subclasses to specify additional cartography relationships on the node.
-        :return: None if not overriden. Else return the node's OtherRelationships.
+        :return: None if not overridden. Else return the node's OtherRelationships.
         """
         return None
 
@@ -100,6 +100,19 @@ class CartographyNodeSchema(abc.ABC):
         """
         Optional.
         Allows specifying extra labels on the node.
-        :return: None if not overriden. Else return the ExtraNodeLabels specified on the node.
+        :return: None if not overridden. Else return the ExtraNodeLabels specified on the node.
         """
         return None
+
+    @property
+    def scoped_cleanup(self) -> bool:
+        """
+        Optional.
+        Allows specifying whether cleanups of this node must be scoped to the sub resource relationship.
+        If True (default), when we clean up nodes of this type, we will only delete stale nodes in the current sub
+        resource. This is how our AWS sync behaves.
+        If False, when we clean up node of this type, we will delete all stale nodes. This is designed for resource
+        types that don't have a "tenant"-like entity.
+        :return: True if not overridden. Else return the boolean value specified on the node.
+        """
+        return True

cartography/models/core/relationships.py

@@ -42,6 +42,11 @@ class CartographyRelProperties(abc.ABC):
     Abstract class that represents the properties on a CartographyRelSchema. This is intended to enforce that all
     subclasses will have a lastupdated field defined on their resulting relationships. These fields are assigned to the
     relationship in the `SET` clause.
+
+    If the CartographyRelSchema is used as a MatchLink, the following properties are required to be defined here:
+    - lastupdated: A PropertyRef to the update tag of the relationship.
+    - _sub_resource_label: A PropertyRef to the label of the sub-resource that the relationship is associated with.
+    - _sub_resource_id: A PropertyRef to the id of the sub-resource that the relationship is associated with.
     """
 
     lastupdated: PropertyRef = field(init=False)
@@ -90,6 +95,29 @@ def make_target_node_matcher(key_ref_dict: Dict[str, PropertyRef]) -> TargetNode
     return make_dataclass(TargetNodeMatcher.__name__, fields, frozen=True)()
 
 
+@dataclass(frozen=True)
+class SourceNodeMatcher:
+    """
+    Same as TargetNodeMatcher, but for the source node; see `make_source_node_matcher()`.
+    This object is used only for load_matchlinks() where we match on and connect existing nodes.
+    This has no effect on CartographyRelSchema objects that are included in CartographyNodeSchema.
+    """
+
+    pass
+
+
+def make_source_node_matcher(key_ref_dict: Dict[str, PropertyRef]) -> SourceNodeMatcher:
+    """
+    :param key_ref_dict: A Dict mapping keys present on the node to PropertyRef objects.
+    :return: A SourceNodeMatcher used for CartographyRelSchema to match with other nodes.
+    """
+    fields = [
+        (key, PropertyRef, field(default=prop_ref))
+        for key, prop_ref in key_ref_dict.items()
+    ]
+    return make_dataclass(SourceNodeMatcher.__name__, fields, frozen=True)()
+
+
 @dataclass(frozen=True)
 class CartographyRelSchema(abc.ABC):
     """
@@ -139,6 +167,22 @@ class CartographyRelSchema(abc.ABC):
         """
         pass
 
+    @property
+    def source_node_label(self) -> str | None:
+        """
+        :return: Optional. Only used for load_matchlinks(). The source node label to use for the relationship.
+        This does not affect CartographyRelSchema that are included in CartographyNodeSchema objects.
+        """
+        return None
+
+    @property
+    def source_node_matcher(self) -> SourceNodeMatcher | None:
+        """
+        :return: Optional. Only used for load_matchlinks(). A SourceNodeMatcher object used to find what node(s) to attach the relationship to.
+        This does not affect CartographyRelSchema that are included in CartographyNodeSchema objects.
+        """
+        return None
+
 
 @dataclass(frozen=True)
 class OtherRelationships:

cartography/models/crowdstrike/hosts.py

@@ -12,7 +12,7 @@ class CrowdstrikeHostNodeProperties(CartographyNodeProperties):
     instance_id: PropertyRef = PropertyRef("instance_id", extra_index=True)
     serial_number: PropertyRef = PropertyRef("serial_number", extra_index=True)
     status: PropertyRef = PropertyRef("status")
-    hostname: PropertyRef = PropertyRef("hostname")
+    hostname: PropertyRef = PropertyRef("hostname", extra_index=True)
     machine_domain: PropertyRef = PropertyRef("machine_domain")
     crowdstrike_first_seen: PropertyRef = PropertyRef("first_seen")
     crowdstrike_last_seen: PropertyRef = PropertyRef("last_seen")

cartography/models/digitalocean/droplet.py

@@ -3,6 +3,7 @@ from dataclasses import dataclass
 from cartography.models.core.common import PropertyRef
 from cartography.models.core.nodes import CartographyNodeProperties
 from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
 from cartography.models.core.relationships import CartographyRelProperties
 from cartography.models.core.relationships import CartographyRelSchema
 from cartography.models.core.relationships import LinkDirection
@@ -52,5 +53,6 @@ class DODropletToAccountRel(CartographyRelSchema):
 @dataclass(frozen=True)
 class DODropletSchema(CartographyNodeSchema):
     label: str = "DODroplet"
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(["ComputeInstance"])
     properties: DODropletNodeProperties = DODropletNodeProperties()
     sub_resource_relationship: DODropletToAccountRel = DODropletToAccountRel()

cartography/models/duo/endpoint.py

@@ -21,7 +21,7 @@ class DuoEndpointNodeProperties(CartographyNodeProperties):
     device_id: PropertyRef = PropertyRef("device_id")
     device_identifier: PropertyRef = PropertyRef("device_identifier")
     device_identifier_type: PropertyRef = PropertyRef("device_identifier_type")
-    device_name: PropertyRef = PropertyRef("device_name")
+    device_name: PropertyRef = PropertyRef("device_name", extra_index=True)
     device_udid: PropertyRef = PropertyRef("device_udid")
     device_username: PropertyRef = PropertyRef("device_username")
     device_username_type: PropertyRef = PropertyRef("device_username_type")

cartography/models/duo/phone.py

@@ -22,8 +22,8 @@ class DuoPhoneNodeProperties(CartographyNodeProperties):
     fingerprint: PropertyRef = PropertyRef("fingerprint")
     last_seen: PropertyRef = PropertyRef("last_seen")
     model: PropertyRef = PropertyRef("model")
-    name: PropertyRef = PropertyRef("name")
-    phone_id: PropertyRef = PropertyRef("phone_id", extra_index=True)
+    name: PropertyRef = PropertyRef("name", extra_index=True)
+    phone_id: PropertyRef = PropertyRef("phone_id")
     platform: PropertyRef = PropertyRef("platform")
     postdelay: PropertyRef = PropertyRef("postdelay")
     predelay: PropertyRef = PropertyRef("predelay")

cartography/models/duo/user.py

@@ -3,6 +3,7 @@ from dataclasses import dataclass
 from cartography.models.core.common import PropertyRef
 from cartography.models.core.nodes import CartographyNodeProperties
 from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
 from cartography.models.core.relationships import CartographyRelProperties
 from cartography.models.core.relationships import CartographyRelSchema
 from cartography.models.core.relationships import LinkDirection
@@ -149,6 +150,9 @@ class DuoUserToHumanRel(CartographyRelSchema):
 @dataclass(frozen=True)
 class DuoUserSchema(CartographyNodeSchema):
     label: str = "DuoUser"
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(
+        ["UserAccount"]
+    )  # UserAccount label is used for ontology mapping
     properties: DuoUserNodeProperties = DuoUserNodeProperties()
     sub_resource_relationship: DuoUserToDuoApiHostRel = DuoUserToDuoApiHostRel()
     other_relationships: OtherRelationships = OtherRelationships(

cartography/models/entra/app_role_assignment.py

@@ -0,0 +1,115 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class EntraAppRoleAssignmentNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    app_role_id: PropertyRef = PropertyRef("app_role_id")
+    created_date_time: PropertyRef = PropertyRef("created_date_time")
+    principal_id: PropertyRef = PropertyRef("principal_id")
+    principal_display_name: PropertyRef = PropertyRef("principal_display_name")
+    principal_type: PropertyRef = PropertyRef("principal_type")
+    resource_display_name: PropertyRef = PropertyRef("resource_display_name")
+    resource_id: PropertyRef = PropertyRef("resource_id")
+    application_app_id: PropertyRef = PropertyRef("application_app_id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EntraAppRoleAssignmentToTenantRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EntraAppRoleAssignmentToTenantRel(CartographyRelSchema):
+    target_node_label: str = "EntraTenant"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("TENANT_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: EntraAppRoleAssignmentToTenantRelProperties = (
+        EntraAppRoleAssignmentToTenantRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class EntraAppRoleAssignmentToApplicationRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EntraAppRoleAssignmentToApplicationRel(CartographyRelSchema):
+    target_node_label: str = "EntraApplication"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"app_id": PropertyRef("application_app_id")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "ASSIGNED_TO"
+    properties: EntraAppRoleAssignmentToApplicationRelProperties = (
+        EntraAppRoleAssignmentToApplicationRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class EntraAppRoleAssignmentToUserRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EntraAppRoleAssignmentToUserRel(CartographyRelSchema):
+    target_node_label: str = "EntraUser"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("principal_id")},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_APP_ROLE"
+    properties: EntraAppRoleAssignmentToUserRelProperties = (
+        EntraAppRoleAssignmentToUserRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class EntraAppRoleAssignmentToGroupRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EntraAppRoleAssignmentToGroupRel(CartographyRelSchema):
+    target_node_label: str = "EntraGroup"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("principal_id")},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_APP_ROLE"
+    properties: EntraAppRoleAssignmentToGroupRelProperties = (
+        EntraAppRoleAssignmentToGroupRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class EntraAppRoleAssignmentSchema(CartographyNodeSchema):
+    label: str = "EntraAppRoleAssignment"
+    properties: EntraAppRoleAssignmentNodeProperties = (
+        EntraAppRoleAssignmentNodeProperties()
+    )
+    sub_resource_relationship: EntraAppRoleAssignmentToTenantRel = (
+        EntraAppRoleAssignmentToTenantRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            EntraAppRoleAssignmentToApplicationRel(),
+            EntraAppRoleAssignmentToUserRel(),
+            EntraAppRoleAssignmentToGroupRel(),
+        ],
+    )

cartography/models/entra/application.py

@@ -0,0 +1,49 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class EntraApplicationNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    app_id: PropertyRef = PropertyRef("app_id")
+    display_name: PropertyRef = PropertyRef("display_name")
+    publisher_domain: PropertyRef = PropertyRef("publisher_domain")
+    sign_in_audience: PropertyRef = PropertyRef("sign_in_audience")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EntraApplicationToTenantRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EntraApplicationToTenantRel(CartographyRelSchema):
+    target_node_label: str = "EntraTenant"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("TENANT_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: EntraApplicationToTenantRelProperties = (
+        EntraApplicationToTenantRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class EntraApplicationSchema(CartographyNodeSchema):
+    label: str = "EntraApplication"
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(["ThirdPartyApp"])
+    properties: EntraApplicationNodeProperties = EntraApplicationNodeProperties()
+    sub_resource_relationship: EntraApplicationToTenantRel = (
+        EntraApplicationToTenantRel()
+    )

cartography/models/entra/entra_user_to_aws_sso.py

@@ -0,0 +1,41 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_source_node_matcher
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import SourceNodeMatcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class EntraUserToAWSSSOUserRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    _sub_resource_label: PropertyRef = PropertyRef(
+        "_sub_resource_label", set_in_kwargs=True
+    )
+    _sub_resource_id: PropertyRef = PropertyRef("_sub_resource_id", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EntraUserToAWSSSOUserMatchLink(CartographyRelSchema):
+    target_node_label: str = "AWSSSOUser"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "user_name": PropertyRef("aws_user_name"),
+            "identity_store_id": PropertyRef("identity_store_id"),
+        }
+    )
+    source_node_label: str = "EntraUser"
+    source_node_matcher: SourceNodeMatcher = make_source_node_matcher(
+        {
+            "user_principal_name": PropertyRef("entra_user_principal_name"),
+        }
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "CAN_SIGN_ON_TO"
+    properties: EntraUserToAWSSSOUserRelProperties = (
+        EntraUserToAWSSSOUserRelProperties()
+    )

cartography/models/entra/group.py

@@ -0,0 +1,117 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class EntraGroupNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    display_name: PropertyRef = PropertyRef("display_name")
+    description: PropertyRef = PropertyRef("description")
+    mail: PropertyRef = PropertyRef("mail")
+    mail_nickname: PropertyRef = PropertyRef("mail_nickname")
+    mail_enabled: PropertyRef = PropertyRef("mail_enabled")
+    security_enabled: PropertyRef = PropertyRef("security_enabled")
+    group_types: PropertyRef = PropertyRef("group_types")
+    visibility: PropertyRef = PropertyRef("visibility")
+    is_assignable_to_role: PropertyRef = PropertyRef("is_assignable_to_role")
+    created_date_time: PropertyRef = PropertyRef("created_date_time")
+    deleted_date_time: PropertyRef = PropertyRef("deleted_date_time")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EntraGroupToTenantRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EntraGroupToTenantRel(CartographyRelSchema):
+    target_node_label: str = "EntraTenant"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("TENANT_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: EntraGroupToTenantRelProperties = EntraGroupToTenantRelProperties()
+
+
+@dataclass(frozen=True)
+class EntraGroupToUserRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:EntraUser)-[:MEMBER_OF]->(:EntraGroup)
+class EntraGroupToUserRel(CartographyRelSchema):
+    target_node_label: str = "EntraUser"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("member_ids", one_to_many=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "MEMBER_OF"
+    properties: EntraGroupToUserRelProperties = EntraGroupToUserRelProperties()
+
+
+@dataclass(frozen=True)
+class EntraGroupToGroupRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:EntraGroup)-[:MEMBER_OF]->(:EntraGroup)
+class EntraGroupToGroupRel(CartographyRelSchema):
+    target_node_label: str = "EntraGroup"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("member_group_ids", one_to_many=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "MEMBER_OF"
+    properties: EntraGroupToGroupRelProperties = EntraGroupToGroupRelProperties()
+
+
+@dataclass(frozen=True)
+class EntraGroupToOwnerRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:EntraGroup)<-[:OWNER_OF]-(:EntraUser)
+class EntraGroupToOwnerRel(CartographyRelSchema):
+    # EntraUsers and Entra service principals can be owners of a group, so we match on the general label
+    # Because id is indexed, this should be fast even though EntraIdentity will also include EntraGroups
+    target_node_label: str = "EntraIdentity"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("owner_ids", one_to_many=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "OWNER_OF"
+    properties: EntraGroupToOwnerRelProperties = EntraGroupToOwnerRelProperties()
+
+
+@dataclass(frozen=True)
+class EntraGroupSchema(CartographyNodeSchema):
+    label: str = "EntraGroup"
+    properties: EntraGroupNodeProperties = EntraGroupNodeProperties()
+    sub_resource_relationship: EntraGroupToTenantRel = EntraGroupToTenantRel()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            EntraGroupToGroupRel(),
+            EntraGroupToUserRel(),
+            EntraGroupToOwnerRel(),
+        ]
+    )
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(
+        [
+            "EntraIdentity",
+        ]
+    )

cartography/models/entra/service_principal.py

@@ -0,0 +1,104 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class EntraServicePrincipalNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    app_id: PropertyRef = PropertyRef("app_id")
+    display_name: PropertyRef = PropertyRef("display_name")
+    reply_urls: PropertyRef = PropertyRef("reply_urls")
+    aws_identity_center_instance_id: PropertyRef = PropertyRef(
+        "aws_identity_center_instance_id"
+    )
+    account_enabled: PropertyRef = PropertyRef("account_enabled")
+    service_principal_type: PropertyRef = PropertyRef("service_principal_type")
+    app_owner_organization_id: PropertyRef = PropertyRef("app_owner_organization_id")
+    login_url: PropertyRef = PropertyRef("login_url")
+    preferred_single_sign_on_mode: PropertyRef = PropertyRef(
+        "preferred_single_sign_on_mode"
+    )
+    preferred_token_signing_key_thumbprint: PropertyRef = PropertyRef(
+        "preferred_token_signing_key_thumbprint"
+    )
+    sign_in_audience: PropertyRef = PropertyRef("sign_in_audience")
+    tags: PropertyRef = PropertyRef("tags")
+    token_encryption_key_id: PropertyRef = PropertyRef("token_encryption_key_id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EntraServicePrincipalToTenantRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EntraServicePrincipalToTenantRel(CartographyRelSchema):
+    target_node_label: str = "EntraTenant"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("TENANT_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: EntraServicePrincipalToTenantRelProperties = (
+        EntraServicePrincipalToTenantRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class ServicePrincipalToApplicationRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class ServicePrincipalToApplicationRel(CartographyRelSchema):
+    target_node_label: str = "EntraApplication"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"app_id": PropertyRef("app_id")},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "SERVICE_PRINCIPAL"
+    properties: ServicePrincipalToApplicationRelProperties = (
+        ServicePrincipalToApplicationRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class ServicePrincipalToAWSIdentityCenterRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class ServicePrincipalToAWSIdentityCenterRel(CartographyRelSchema):
+    target_node_label: str = "AWSIdentityCenter"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"identity_store_id": PropertyRef("aws_identity_center_instance_id")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "FEDERATES_TO"
+    properties: ServicePrincipalToAWSIdentityCenterRelProperties = (
+        ServicePrincipalToAWSIdentityCenterRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class EntraServicePrincipalSchema(CartographyNodeSchema):
+    label: str = "EntraServicePrincipal"
+    properties: EntraServicePrincipalNodeProperties = (
+        EntraServicePrincipalNodeProperties()
+    )
+    sub_resource_relationship: EntraServicePrincipalToTenantRel = (
+        EntraServicePrincipalToTenantRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [ServicePrincipalToApplicationRel(), ServicePrincipalToAWSIdentityCenterRel()]
+    )