cartography 0.105.0__py3-none-any.whl → 0.106.0__py3-none-any.whl

cartography/models/aws/ecs/tasks.py

@@ -0,0 +1,110 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class ECSTaskNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("taskArn")
+    arn: PropertyRef = PropertyRef("taskArn", extra_index=True)
+    availability_zone: PropertyRef = PropertyRef("availabilityZone")
+    capacity_provider_name: PropertyRef = PropertyRef("capacityProviderName")
+    cluster_arn: PropertyRef = PropertyRef("clusterArn")
+    connectivity: PropertyRef = PropertyRef("connectivity")
+    connectivity_at: PropertyRef = PropertyRef("connectivityAt")
+    container_instance_arn: PropertyRef = PropertyRef("containerInstanceArn")
+    cpu: PropertyRef = PropertyRef("cpu")
+    created_at: PropertyRef = PropertyRef("createdAt")
+    desired_status: PropertyRef = PropertyRef("desiredStatus")
+    enable_execute_command: PropertyRef = PropertyRef("enableExecuteCommand")
+    execution_stopped_at: PropertyRef = PropertyRef("executionStoppedAt")
+    group: PropertyRef = PropertyRef("group")
+    health_status: PropertyRef = PropertyRef("healthStatus")
+    last_status: PropertyRef = PropertyRef("lastStatus")
+    launch_type: PropertyRef = PropertyRef("launchType")
+    memory: PropertyRef = PropertyRef("memory")
+    platform_version: PropertyRef = PropertyRef("platformVersion")
+    platform_family: PropertyRef = PropertyRef("platformFamily")
+    pull_started_at: PropertyRef = PropertyRef("pullStartedAt")
+    pull_stopped_at: PropertyRef = PropertyRef("pullStoppedAt")
+    started_at: PropertyRef = PropertyRef("startedAt")
+    started_by: PropertyRef = PropertyRef("startedBy")
+    stop_code: PropertyRef = PropertyRef("stopCode")
+    stopped_at: PropertyRef = PropertyRef("stoppedAt")
+    stopped_reason: PropertyRef = PropertyRef("stoppedReason")
+    stopping_at: PropertyRef = PropertyRef("stoppingAt")
+    task_definition_arn: PropertyRef = PropertyRef("taskDefinitionArn")
+    version: PropertyRef = PropertyRef("version")
+    ephemeral_storage_size_in_gib: PropertyRef = PropertyRef(
+        "ephemeralStorage.sizeInGiB"
+    )
+    region: PropertyRef = PropertyRef("Region", set_in_kwargs=True)
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class ECSTaskToECSClusterRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class ECSTaskToECSClusterRel(CartographyRelSchema):
+    target_node_label: str = "ECSCluster"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("ClusterArn", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_TASK"
+    properties: ECSTaskToECSClusterRelProperties = ECSTaskToECSClusterRelProperties()
+
+
+@dataclass(frozen=True)
+class ECSTaskToContainerInstanceRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class ECSTaskToContainerInstanceRel(CartographyRelSchema):
+    target_node_label: str = "ECSContainerInstance"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("containerInstanceArn")}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_TASK"
+    properties: ECSTaskToContainerInstanceRelProperties = (
+        ECSTaskToContainerInstanceRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class ECSTaskToAWSAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class ECSTaskToAWSAccountRel(CartographyRelSchema):
+    target_node_label: str = "AWSAccount"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AWS_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: ECSTaskToAWSAccountRelProperties = ECSTaskToAWSAccountRelProperties()
+
+
+@dataclass(frozen=True)
+class ECSTaskSchema(CartographyNodeSchema):
+    label: str = "ECSTask"
+    properties: ECSTaskNodeProperties = ECSTaskNodeProperties()
+    sub_resource_relationship: ECSTaskToAWSAccountRel = ECSTaskToAWSAccountRel()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [ECSTaskToContainerInstanceRel(), ECSTaskToECSClusterRel()]
+    )

cartography/models/aws/efs/access_point.py

@@ -0,0 +1,77 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class EfsAccessPointNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("AccessPointArn")
+    arn: PropertyRef = PropertyRef("AccessPointArn", extra_index=True)
+    region: PropertyRef = PropertyRef("Region", set_in_kwargs=True)
+    access_point_id: PropertyRef = PropertyRef("AccessPointId")
+    file_system_id: PropertyRef = PropertyRef("FileSystemId")
+    lifecycle_state: PropertyRef = PropertyRef("LifeCycleState")
+    name: PropertyRef = PropertyRef("Name")
+    owner_id: PropertyRef = PropertyRef("OwnerId")
+    posix_gid: PropertyRef = PropertyRef("Gid")
+    posix_uid: PropertyRef = PropertyRef("Uid")
+    root_directory_path: PropertyRef = PropertyRef("RootDirectoryPath")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EfsAccessPointToAwsAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EfsAccessPointToAWSAccountRel(CartographyRelSchema):
+    target_node_label: str = "AWSAccount"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AWS_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: EfsAccessPointToAwsAccountRelProperties = (
+        EfsAccessPointToAwsAccountRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class EfsAccessPointToEfsFileSystemRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EfsAccessPointToEfsFileSystemRel(CartographyRelSchema):
+    target_node_label: str = "EfsFileSystem"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("FileSystemId")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "ACCESS_POINT_OF"
+    properties: EfsAccessPointToEfsFileSystemRelProperties = (
+        EfsAccessPointToEfsFileSystemRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class EfsAccessPointSchema(CartographyNodeSchema):
+    label: str = "EfsAccessPoint"
+    properties: EfsAccessPointNodeProperties = EfsAccessPointNodeProperties()
+    sub_resource_relationship: EfsAccessPointToAWSAccountRel = (
+        EfsAccessPointToAWSAccountRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            EfsAccessPointToEfsFileSystemRel(),
+        ]
+    )

cartography/models/aws/efs/file_system.py

@@ -0,0 +1,60 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class EfsFileSystemNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("FileSystemId")
+    arn: PropertyRef = PropertyRef("FileSystemArn", extra_index=True)
+    region: PropertyRef = PropertyRef("Region", set_in_kwargs=True)
+    owner_id: PropertyRef = PropertyRef("OwnerId")
+    creation_token: PropertyRef = PropertyRef("CreationToken")
+    creation_time: PropertyRef = PropertyRef("CreationTime")
+    lifecycle_state: PropertyRef = PropertyRef("LifeCycleState")
+    name: PropertyRef = PropertyRef("Name")
+    number_of_mount_targets: PropertyRef = PropertyRef("NumberOfMountTargets")
+    size_in_bytes_value: PropertyRef = PropertyRef("SizeInBytesValue")
+    size_in_bytes_timestamp: PropertyRef = PropertyRef("SizeInBytesTimestamp")
+    performance_mode: PropertyRef = PropertyRef("PerformanceMode")
+    encrypted: PropertyRef = PropertyRef("Encrypted")
+    kms_key_id: PropertyRef = PropertyRef("KmsKeyId")
+    throughput_mode: PropertyRef = PropertyRef("ThroughputMode")
+    availability_zone_name: PropertyRef = PropertyRef("AvailabilityZoneName")
+    availability_zone_id: PropertyRef = PropertyRef("AvailabilityZoneId")
+    file_system_protection: PropertyRef = PropertyRef("FileSystemProtection")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EfsFileSystemToAwsAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EfsFileSystemToAWSAccountRel(CartographyRelSchema):
+    target_node_label: str = "AWSAccount"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AWS_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: EfsFileSystemToAwsAccountRelProperties = (
+        EfsFileSystemToAwsAccountRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class EfsFileSystemSchema(CartographyNodeSchema):
+    label: str = "EfsFileSystem"
+    properties: EfsFileSystemNodeProperties = EfsFileSystemNodeProperties()
+    sub_resource_relationship: EfsFileSystemToAWSAccountRel = (
+        EfsFileSystemToAWSAccountRel()
+    )

cartography/models/aws/efs/mount_target.py

@@ -0,0 +1,79 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class EfsMountTargetNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("MountTargetId")
+    arn: PropertyRef = PropertyRef("MountTargetId", extra_index=True)
+    region: PropertyRef = PropertyRef("Region", set_in_kwargs=True)
+    fileSystem_id: PropertyRef = PropertyRef("FileSystemId")
+    lifecycle_state: PropertyRef = PropertyRef("LifeCycleState")
+    mount_target_id: PropertyRef = PropertyRef("MountTargetId")
+    subnet_id: PropertyRef = PropertyRef("SubnetId")
+    availability_zone_id: PropertyRef = PropertyRef("AvailabilityZoneId")
+    availability_zone_name: PropertyRef = PropertyRef("AvailabilityZoneName")
+    ip_address: PropertyRef = PropertyRef("IpAddress")
+    network_interface_id: PropertyRef = PropertyRef("NetworkInterfaceId")
+    owner_id: PropertyRef = PropertyRef("OwnerId")
+    vpc_id: PropertyRef = PropertyRef("VpcId")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EfsMountTargetToAwsAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EfsMountTargetToAWSAccountRel(CartographyRelSchema):
+    target_node_label: str = "AWSAccount"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AWS_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: EfsMountTargetToAwsAccountRelProperties = (
+        EfsMountTargetToAwsAccountRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class EfsMountTargetToEfsFileSystemRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EfsMountTargetToEfsFileSystemRel(CartographyRelSchema):
+    target_node_label: str = "EfsFileSystem"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("FileSystemId")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "ATTACHED_TO"
+    properties: EfsMountTargetToEfsFileSystemRelProperties = (
+        EfsMountTargetToEfsFileSystemRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class EfsMountTargetSchema(CartographyNodeSchema):
+    label: str = "EfsMountTarget"
+    properties: EfsMountTargetNodeProperties = EfsMountTargetNodeProperties()
+    sub_resource_relationship: EfsMountTargetToAWSAccountRel = (
+        EfsMountTargetToAWSAccountRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            EfsMountTargetToEfsFileSystemRel(),
+        ]
+    )

cartography/models/core/common.py

@@ -63,6 +63,7 @@ class PropertyRef:
             ```
             This means that as we create AWSInstanceProfile nodes, we will search for AWSRoles to attach to, and we do
             this by checking if each role's `arn` field is in the `Roles` list of the data dict.
+        Note that one_to_many has no effect on matchlinks.
         """
         self.name = name
         self.set_in_kwargs = set_in_kwargs

cartography/models/core/relationships.py

@@ -42,6 +42,11 @@ class CartographyRelProperties(abc.ABC):
     Abstract class that represents the properties on a CartographyRelSchema. This is intended to enforce that all
     subclasses will have a lastupdated field defined on their resulting relationships. These fields are assigned to the
     relationship in the `SET` clause.
+
+    If the CartographyRelSchema is used as a MatchLink, the following properties are required to be defined here:
+    - lastupdated: A PropertyRef to the update tag of the relationship.
+    - _sub_resource_label: A PropertyRef to the label of the sub-resource that the relationship is associated with.
+    - _sub_resource_id: A PropertyRef to the id of the sub-resource that the relationship is associated with.
     """
 
     lastupdated: PropertyRef = field(init=False)
@@ -90,6 +95,29 @@ def make_target_node_matcher(key_ref_dict: Dict[str, PropertyRef]) -> TargetNode
     return make_dataclass(TargetNodeMatcher.__name__, fields, frozen=True)()
 
 
+@dataclass(frozen=True)
+class SourceNodeMatcher:
+    """
+    Same as TargetNodeMatcher, but for the source node; see `make_source_node_matcher()`.
+    This object is used only for load_matchlinks() where we match on and connect existing nodes.
+    This has no effect on CartographyRelSchema objects that are included in CartographyNodeSchema.
+    """
+
+    pass
+
+
+def make_source_node_matcher(key_ref_dict: Dict[str, PropertyRef]) -> SourceNodeMatcher:
+    """
+    :param key_ref_dict: A Dict mapping keys present on the node to PropertyRef objects.
+    :return: A SourceNodeMatcher used for CartographyRelSchema to match with other nodes.
+    """
+    fields = [
+        (key, PropertyRef, field(default=prop_ref))
+        for key, prop_ref in key_ref_dict.items()
+    ]
+    return make_dataclass(SourceNodeMatcher.__name__, fields, frozen=True)()
+
+
 @dataclass(frozen=True)
 class CartographyRelSchema(abc.ABC):
     """
@@ -139,6 +167,22 @@ class CartographyRelSchema(abc.ABC):
         """
         pass
 
+    @property
+    def source_node_label(self) -> str | None:
+        """
+        :return: Optional. Only used for load_matchlinks(). The source node label to use for the relationship.
+        This does not affect CartographyRelSchema that are included in CartographyNodeSchema objects.
+        """
+        return None
+
+    @property
+    def source_node_matcher(self) -> SourceNodeMatcher | None:
+        """
+        :return: Optional. Only used for load_matchlinks(). A SourceNodeMatcher object used to find what node(s) to attach the relationship to.
+        This does not affect CartographyRelSchema that are included in CartographyNodeSchema objects.
+        """
+        return None
+
 
 @dataclass(frozen=True)
 class OtherRelationships:

cartography/models/entra/app_role_assignment.py

@@ -0,0 +1,115 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class EntraAppRoleAssignmentNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    app_role_id: PropertyRef = PropertyRef("app_role_id")
+    created_date_time: PropertyRef = PropertyRef("created_date_time")
+    principal_id: PropertyRef = PropertyRef("principal_id")
+    principal_display_name: PropertyRef = PropertyRef("principal_display_name")
+    principal_type: PropertyRef = PropertyRef("principal_type")
+    resource_display_name: PropertyRef = PropertyRef("resource_display_name")
+    resource_id: PropertyRef = PropertyRef("resource_id")
+    application_app_id: PropertyRef = PropertyRef("application_app_id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EntraAppRoleAssignmentToTenantRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EntraAppRoleAssignmentToTenantRel(CartographyRelSchema):
+    target_node_label: str = "EntraTenant"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("TENANT_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: EntraAppRoleAssignmentToTenantRelProperties = (
+        EntraAppRoleAssignmentToTenantRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class EntraAppRoleAssignmentToApplicationRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EntraAppRoleAssignmentToApplicationRel(CartographyRelSchema):
+    target_node_label: str = "EntraApplication"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"app_id": PropertyRef("application_app_id")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "ASSIGNED_TO"
+    properties: EntraAppRoleAssignmentToApplicationRelProperties = (
+        EntraAppRoleAssignmentToApplicationRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class EntraAppRoleAssignmentToUserRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EntraAppRoleAssignmentToUserRel(CartographyRelSchema):
+    target_node_label: str = "EntraUser"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("principal_id")},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_APP_ROLE"
+    properties: EntraAppRoleAssignmentToUserRelProperties = (
+        EntraAppRoleAssignmentToUserRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class EntraAppRoleAssignmentToGroupRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EntraAppRoleAssignmentToGroupRel(CartographyRelSchema):
+    target_node_label: str = "EntraGroup"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("principal_id")},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_APP_ROLE"
+    properties: EntraAppRoleAssignmentToGroupRelProperties = (
+        EntraAppRoleAssignmentToGroupRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class EntraAppRoleAssignmentSchema(CartographyNodeSchema):
+    label: str = "EntraAppRoleAssignment"
+    properties: EntraAppRoleAssignmentNodeProperties = (
+        EntraAppRoleAssignmentNodeProperties()
+    )
+    sub_resource_relationship: EntraAppRoleAssignmentToTenantRel = (
+        EntraAppRoleAssignmentToTenantRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            EntraAppRoleAssignmentToApplicationRel(),
+            EntraAppRoleAssignmentToUserRel(),
+            EntraAppRoleAssignmentToGroupRel(),
+        ],
+    )

cartography/models/entra/application.py

@@ -0,0 +1,47 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class EntraApplicationNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    app_id: PropertyRef = PropertyRef("app_id")
+    display_name: PropertyRef = PropertyRef("display_name")
+    publisher_domain: PropertyRef = PropertyRef("publisher_domain")
+    sign_in_audience: PropertyRef = PropertyRef("sign_in_audience")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EntraApplicationToTenantRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EntraApplicationToTenantRel(CartographyRelSchema):
+    target_node_label: str = "EntraTenant"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("TENANT_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: EntraApplicationToTenantRelProperties = (
+        EntraApplicationToTenantRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class EntraApplicationSchema(CartographyNodeSchema):
+    label: str = "EntraApplication"
+    properties: EntraApplicationNodeProperties = EntraApplicationNodeProperties()
+    sub_resource_relationship: EntraApplicationToTenantRel = (
+        EntraApplicationToTenantRel()
+    )

cartography/models/entra/user.py

@@ -9,6 +9,10 @@ from cartography.models.core.relationships import LinkDirection
 from cartography.models.core.relationships import make_target_node_matcher
 from cartography.models.core.relationships import TargetNodeMatcher
 
+# The user resource in Microsoft Graph exposes hundreds of properties but, in
+# practice, only a small subset is populated in most tenants.  We deliberately
+# model *just* the commonly-used attributes to keep the graph lean.
+
 
 @dataclass(frozen=True)
 class EntraUserNodeProperties(CartographyNodeProperties):
@@ -17,61 +21,23 @@ class EntraUserNodeProperties(CartographyNodeProperties):
     display_name: PropertyRef = PropertyRef("display_name")
     given_name: PropertyRef = PropertyRef("given_name")
     surname: PropertyRef = PropertyRef("surname")
-    # The underlying datatype calls this 'mail' but everything else in cartography uses 'email'
+    # The SDK calls this `mail`; we surface it as `email` like the rest of Cartography
     email: PropertyRef = PropertyRef("mail", extra_index=True)
-    other_mails: PropertyRef = PropertyRef("other_mails")
-    preferred_language: PropertyRef = PropertyRef("preferred_language")
-    preferred_name: PropertyRef = PropertyRef("preferred_name")
-    state: PropertyRef = PropertyRef("state")
-    usage_location: PropertyRef = PropertyRef("usage_location")
-    user_type: PropertyRef = PropertyRef("user_type")
-    show_in_address_list: PropertyRef = PropertyRef("show_in_address_list")
-    sign_in_sessions_valid_from_date_time: PropertyRef = PropertyRef(
-        "sign_in_sessions_valid_from_date_time"
-    )
-    security_identifier: PropertyRef = PropertyRef("security_identifier")
-    account_enabled: PropertyRef = PropertyRef("account_enabled")
-    city: PropertyRef = PropertyRef("city")
-    company_name: PropertyRef = PropertyRef("company_name")
-    consent_provided_for_minor: PropertyRef = PropertyRef("consent_provided_for_minor")
-    country: PropertyRef = PropertyRef("country")
-    created_date_time: PropertyRef = PropertyRef("created_date_time")
-    creation_type: PropertyRef = PropertyRef("creation_type")
-    deleted_date_time: PropertyRef = PropertyRef("deleted_date_time")
+    mobile_phone: PropertyRef = PropertyRef("mobile_phone")
+    business_phones: PropertyRef = PropertyRef("business_phones")
+    job_title: PropertyRef = PropertyRef("job_title")
     department: PropertyRef = PropertyRef("department")
+    company_name: PropertyRef = PropertyRef("company_name")
+    office_location: PropertyRef = PropertyRef("office_location")
     employee_id: PropertyRef = PropertyRef("employee_id")
     employee_type: PropertyRef = PropertyRef("employee_type")
-    external_user_state: PropertyRef = PropertyRef("external_user_state")
-    external_user_state_change_date_time: PropertyRef = PropertyRef(
-        "external_user_state_change_date_time"
-    )
-    hire_date: PropertyRef = PropertyRef("hire_date")
-    is_management_restricted: PropertyRef = PropertyRef("is_management_restricted")
-    is_resource_account: PropertyRef = PropertyRef("is_resource_account")
-    job_title: PropertyRef = PropertyRef("job_title")
-    last_password_change_date_time: PropertyRef = PropertyRef(
-        "last_password_change_date_time"
-    )
-    mail_nickname: PropertyRef = PropertyRef("mail_nickname")
-    office_location: PropertyRef = PropertyRef("office_location")
-    on_premises_distinguished_name: PropertyRef = PropertyRef(
-        "on_premises_distinguished_name"
-    )
-    on_premises_domain_name: PropertyRef = PropertyRef("on_premises_domain_name")
-    on_premises_immutable_id: PropertyRef = PropertyRef("on_premises_immutable_id")
-    on_premises_last_sync_date_time: PropertyRef = PropertyRef(
-        "on_premises_last_sync_date_time"
-    )
-    on_premises_sam_account_name: PropertyRef = PropertyRef(
-        "on_premises_sam_account_name"
-    )
-    on_premises_security_identifier: PropertyRef = PropertyRef(
-        "on_premises_security_identifier"
-    )
-    on_premises_sync_enabled: PropertyRef = PropertyRef("on_premises_sync_enabled")
-    on_premises_user_principal_name: PropertyRef = PropertyRef(
-        "on_premises_user_principal_name"
-    )
+    city: PropertyRef = PropertyRef("city")
+    state: PropertyRef = PropertyRef("state")
+    country: PropertyRef = PropertyRef("country")
+    preferred_language: PropertyRef = PropertyRef("preferred_language")
+    account_enabled: PropertyRef = PropertyRef("account_enabled")
+    age_group: PropertyRef = PropertyRef("age_group")
+    manager_id: PropertyRef = PropertyRef("manager_id")
     lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)