cartography 0.108.0rc1__py3-none-any.whl → 0.109.0__py3-none-any.whl

cartography/models/aws/rds/subnet_group.py

@@ -0,0 +1,101 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class DBSubnetGroupNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    name: PropertyRef = PropertyRef("name")
+    vpc_id: PropertyRef = PropertyRef("vpc_id")
+    description: PropertyRef = PropertyRef("description")
+    status: PropertyRef = PropertyRef("status")
+    region: PropertyRef = PropertyRef("Region", set_in_kwargs=True)
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class DBSubnetGroupToAWSAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class DBSubnetGroupToAWSAccountRel(CartographyRelSchema):
+    target_node_label: str = "AWSAccount"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AWS_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: DBSubnetGroupToAWSAccountRelProperties = (
+        DBSubnetGroupToAWSAccountRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class DBSubnetGroupToRDSInstanceRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class DBSubnetGroupToRDSInstanceRel(CartographyRelSchema):
+    target_node_label: str = "RDSInstance"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "db_instance_identifier": PropertyRef(
+                "db_instance_identifier", one_to_many=True
+            ),
+        }
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "MEMBER_OF_DB_SUBNET_GROUP"
+    properties: DBSubnetGroupToRDSInstanceRelProperties = (
+        DBSubnetGroupToRDSInstanceRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class DBSubnetGroupToEC2SubnetRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class DBSubnetGroupToEC2SubnetRel(CartographyRelSchema):
+    target_node_label: str = "EC2Subnet"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "subnetid": PropertyRef("subnet_ids", one_to_many=True),
+        }
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "RESOURCE"
+    properties: DBSubnetGroupToEC2SubnetRelProperties = (
+        DBSubnetGroupToEC2SubnetRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class DBSubnetGroupSchema(CartographyNodeSchema):
+    """
+    DB Subnet Group schema
+    """
+
+    label: str = "DBSubnetGroup"
+    properties: DBSubnetGroupNodeProperties = DBSubnetGroupNodeProperties()
+    sub_resource_relationship: DBSubnetGroupToAWSAccountRel = (
+        DBSubnetGroupToAWSAccountRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            DBSubnetGroupToRDSInstanceRel(),
+            DBSubnetGroupToEC2SubnetRel(),
+        ]
+    )

cartography/models/aws/route53/dnsrecord.py

@@ -0,0 +1,214 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class AWSDNSRecordNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    name: PropertyRef = PropertyRef("name", extra_index=True)
+    type: PropertyRef = PropertyRef("type")
+    value: PropertyRef = PropertyRef("value")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AWSDNSRecordToZoneRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AWSDNSRecordToZoneRel(CartographyRelSchema):
+    target_node_label: str = "AWSDNSZone"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"zoneid": PropertyRef("zoneid")}
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "MEMBER_OF_DNS_ZONE"
+    properties: AWSDNSRecordToZoneRelProperties = AWSDNSRecordToZoneRelProperties()
+
+
+@dataclass(frozen=True)
+class AWSDNSRecordToAWSAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AWSDNSRecordToAWSAccountRel(CartographyRelSchema):
+    target_node_label: str = "AWSAccount"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AWS_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: AWSDNSRecordToAWSAccountRelProperties = (
+        AWSDNSRecordToAWSAccountRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AWSDNSRecordToNameServerRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AWSDNSRecordToNameServerRel(CartographyRelSchema):
+    target_node_label: str = "NameServer"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "id": PropertyRef("servers", one_to_many=True),
+        }
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "DNS_POINTS_TO"
+    properties: AWSDNSRecordToNameServerRelProperties = (
+        AWSDNSRecordToNameServerRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AWSDNSRecordToEC2InstanceRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AWSDNSRecordToEC2InstanceRel(CartographyRelSchema):
+    target_node_label: str = "EC2Instance"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "publicdnsname": PropertyRef("value"),
+        }
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "DNS_POINTS_TO"
+    properties: AWSDNSRecordToEC2InstanceRelProperties = (
+        AWSDNSRecordToEC2InstanceRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AWSDNSRecordToLoadBalancerRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AWSDNSRecordToLoadBalancerRel(CartographyRelSchema):
+    target_node_label: str = "LoadBalancer"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "dnsname": PropertyRef("value"),
+        }
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "DNS_POINTS_TO"
+    properties: AWSDNSRecordToLoadBalancerRelProperties = (
+        AWSDNSRecordToLoadBalancerRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AWSDNSRecordToLoadBalancerV2RelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AWSDNSRecordToLoadBalancerV2Rel(CartographyRelSchema):
+    target_node_label: str = "LoadBalancerV2"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "dnsname": PropertyRef("value"),
+        }
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "DNS_POINTS_TO"
+    properties: AWSDNSRecordToLoadBalancerV2RelProperties = (
+        AWSDNSRecordToLoadBalancerV2RelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AWSDNSRecordToESDomainRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AWSDNSRecordToESDomainRel(CartographyRelSchema):
+    target_node_label: str = "ESDomain"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "endpoint": PropertyRef("value"),
+        }
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "DNS_POINTS_TO"
+    properties: AWSDNSRecordToESDomainRelProperties = (
+        AWSDNSRecordToESDomainRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AWSDNSRecordToDNSRecordRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AWSDNSRecordToDNSRecordRel(CartographyRelSchema):
+    target_node_label: str = "AWSDNSRecord"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "name": PropertyRef("value"),
+        }
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "DNS_POINTS_TO"
+    properties: AWSDNSRecordToDNSRecordRelProperties = (
+        AWSDNSRecordToDNSRecordRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AWSDNSRecordToIpRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AWSDNSRecordToIpRel(CartographyRelSchema):
+    target_node_label: str = "Ip"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "id": PropertyRef("ip_addresses", one_to_many=True),
+        }
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "DNS_POINTS_TO"
+    properties: AWSDNSRecordToIpRelProperties = AWSDNSRecordToIpRelProperties()
+
+
+class AWSDNSRecordSchema(CartographyNodeSchema):
+    label: str = "AWSDNSRecord"
+    properties: AWSDNSRecordNodeProperties = AWSDNSRecordNodeProperties()
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(["DNSRecord"])
+    sub_resource_relationship: AWSDNSRecordToAWSAccountRel = (
+        AWSDNSRecordToAWSAccountRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            AWSDNSRecordToNameServerRel(),
+            AWSDNSRecordToEC2InstanceRel(),
+            AWSDNSRecordToLoadBalancerRel(),
+            AWSDNSRecordToLoadBalancerV2Rel(),
+            AWSDNSRecordToESDomainRel(),
+            AWSDNSRecordToDNSRecordRel(),
+            AWSDNSRecordToZoneRel(),
+            AWSDNSRecordToIpRel(),
+        ]
+    )

cartography/models/aws/route53/nameserver.py

@@ -0,0 +1,63 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class NameServerNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    name: PropertyRef = PropertyRef("id", extra_index=True)
+    zoneid: PropertyRef = PropertyRef("zoneid")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class NameServerToZoneRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class NameServerToZoneRel(CartographyRelSchema):
+    target_node_label: str = "AWSDNSZone"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"zoneid": PropertyRef("zoneid")}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "NAMESERVER"
+    properties: NameServerToZoneRelProperties = NameServerToZoneRelProperties()
+
+
+@dataclass(frozen=True)
+class NameServerToAWSAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class NameServerToAWSAccountRel(CartographyRelSchema):
+    target_node_label: str = "AWSAccount"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AWS_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: NameServerToAWSAccountRelProperties = (
+        NameServerToAWSAccountRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class NameServerSchema(CartographyNodeSchema):
+    label: str = "NameServer"
+    properties: NameServerNodeProperties = NameServerNodeProperties()
+    sub_resource_relationship: NameServerToAWSAccountRel = NameServerToAWSAccountRel()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [NameServerToZoneRel()]
+    )

cartography/models/aws/route53/subzone.py

@@ -0,0 +1,40 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_source_node_matcher
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import SourceNodeMatcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class AWSDNSZoneSubzoneRelProperties(CartographyRelProperties):
+    # Mandatory fields for MatchLinks
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    _sub_resource_label: PropertyRef = PropertyRef(
+        "_sub_resource_label", set_in_kwargs=True
+    )
+    _sub_resource_id: PropertyRef = PropertyRef("_sub_resource_id", set_in_kwargs=True)
+
+
+# MatchLink for creating SUBZONE relationships between DNS zones
+@dataclass(frozen=True)
+class AWSDNSZoneSubzoneMatchLink(CartographyRelSchema):
+    target_node_label: str = "AWSDNSZone"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "zoneid": PropertyRef("subzone_id"),
+        }
+    )
+    source_node_label: str = "AWSDNSZone"
+    source_node_matcher: SourceNodeMatcher = make_source_node_matcher(
+        {
+            "zoneid": PropertyRef("zone_id"),
+        }
+    )
+    properties: AWSDNSZoneSubzoneRelProperties = AWSDNSZoneSubzoneRelProperties()
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "SUBZONE"

cartography/models/aws/route53/zone.py

@@ -0,0 +1,47 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class AWSDNSZoneNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("zoneid")
+    zoneid: PropertyRef = PropertyRef("zoneid")
+    name: PropertyRef = PropertyRef("name", extra_index=True)
+    comment: PropertyRef = PropertyRef("comment")
+    privatezone: PropertyRef = PropertyRef("privatezone")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AWSDNSZoneToAWSAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AWSDNSZoneToAWSAccountRel(CartographyRelSchema):
+    target_node_label: str = "AWSAccount"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AWS_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: AWSDNSZoneToAWSAccountRelProperties = (
+        AWSDNSZoneToAWSAccountRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AWSDNSZoneSchema(CartographyNodeSchema):
+    label: str = "AWSDNSZone"
+    properties: AWSDNSZoneNodeProperties = AWSDNSZoneNodeProperties()
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(["DNSZone"])
+    sub_resource_relationship: AWSDNSZoneToAWSAccountRel = AWSDNSZoneToAWSAccountRel()

cartography/models/aws/secretsmanager/secret.py

@@ -0,0 +1,106 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class SecretsManagerSecretNodeProperties(CartographyNodeProperties):
+    """
+    Properties for AWS Secrets Manager Secret
+    """
+
+    id: PropertyRef = PropertyRef("ARN")
+    arn: PropertyRef = PropertyRef("ARN", extra_index=True)
+    name: PropertyRef = PropertyRef("Name", extra_index=True)
+    description: PropertyRef = PropertyRef("Description")
+
+    # Rotation properties
+    rotation_enabled: PropertyRef = PropertyRef("RotationEnabled")
+    rotation_lambda_arn: PropertyRef = PropertyRef("RotationLambdaARN")
+    rotation_rules_automatically_after_days: PropertyRef = PropertyRef(
+        "RotationRulesAutomaticallyAfterDays"
+    )
+
+    # Date properties (will be converted to epoch timestamps)
+    created_date: PropertyRef = PropertyRef("CreatedDate")
+    last_rotated_date: PropertyRef = PropertyRef("LastRotatedDate")
+    last_changed_date: PropertyRef = PropertyRef("LastChangedDate")
+    last_accessed_date: PropertyRef = PropertyRef("LastAccessedDate")
+    deleted_date: PropertyRef = PropertyRef("DeletedDate")
+
+    # Other properties
+    kms_key_id: PropertyRef = PropertyRef("KmsKeyId")
+    owning_service: PropertyRef = PropertyRef("OwningService")
+    primary_region: PropertyRef = PropertyRef("PrimaryRegion")
+
+    # Standard cartography properties
+    region: PropertyRef = PropertyRef("Region", set_in_kwargs=True)
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class SecretsManagerSecretRelProperties(CartographyRelProperties):
+    """
+    Properties for relationships between Secret and other nodes
+    """
+
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class SecretsManagerSecretToAWSAccountRel(CartographyRelSchema):
+    """
+    Relationship between Secret and AWS Account
+    """
+
+    target_node_label: str = "AWSAccount"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AWS_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: SecretsManagerSecretRelProperties = SecretsManagerSecretRelProperties()
+
+
+@dataclass(frozen=True)
+class SecretsManagerSecretToKMSKeyRel(CartographyRelSchema):
+    """
+    Relationship between Secret and its KMS key
+    Only created when KmsKeyId is present
+    """
+
+    target_node_label: str = "AWSKMSKey"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("KmsKeyId")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "ENCRYPTED_BY"
+    properties: SecretsManagerSecretRelProperties = SecretsManagerSecretRelProperties()
+
+
+@dataclass(frozen=True)
+class SecretsManagerSecretSchema(CartographyNodeSchema):
+    """
+    Schema for AWS Secrets Manager Secret
+    """
+
+    label: str = "SecretsManagerSecret"
+    properties: SecretsManagerSecretNodeProperties = (
+        SecretsManagerSecretNodeProperties()
+    )
+    sub_resource_relationship: SecretsManagerSecretToAWSAccountRel = (
+        SecretsManagerSecretToAWSAccountRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            SecretsManagerSecretToKMSKeyRel(),
+        ],
+    )

cartography/models/entra/group.py

@@ -3,6 +3,7 @@ from dataclasses import dataclass
 from cartography.models.core.common import PropertyRef
 from cartography.models.core.nodes import CartographyNodeProperties
 from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
 from cartography.models.core.relationships import CartographyRelProperties
 from cartography.models.core.relationships import CartographyRelSchema
 from cartography.models.core.relationships import LinkDirection
@@ -78,6 +79,25 @@ class EntraGroupToGroupRel(CartographyRelSchema):
     properties: EntraGroupToGroupRelProperties = EntraGroupToGroupRelProperties()
 
 
+@dataclass(frozen=True)
+class EntraGroupToOwnerRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:EntraGroup)<-[:OWNER_OF]-(:EntraUser)
+class EntraGroupToOwnerRel(CartographyRelSchema):
+    # EntraUsers and Entra service principals can be owners of a group, so we match on the general label
+    # Because id is indexed, this should be fast even though EntraIdentity will also include EntraGroups
+    target_node_label: str = "EntraIdentity"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("owner_ids", one_to_many=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "OWNER_OF"
+    properties: EntraGroupToOwnerRelProperties = EntraGroupToOwnerRelProperties()
+
+
 @dataclass(frozen=True)
 class EntraGroupSchema(CartographyNodeSchema):
     label: str = "EntraGroup"
@@ -87,5 +107,11 @@ class EntraGroupSchema(CartographyNodeSchema):
         [
             EntraGroupToGroupRel(),
             EntraGroupToUserRel(),
+            EntraGroupToOwnerRel(),
+        ]
+    )
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(
+        [
+            "EntraIdentity",
         ]
     )

cartography/models/entra/user.py

@@ -3,6 +3,7 @@ from dataclasses import dataclass
 from cartography.models.core.common import PropertyRef
 from cartography.models.core.nodes import CartographyNodeProperties
 from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
 from cartography.models.core.relationships import CartographyRelProperties
 from cartography.models.core.relationships import CartographyRelSchema
 from cartography.models.core.relationships import LinkDirection
@@ -63,3 +64,8 @@ class EntraUserSchema(CartographyNodeSchema):
     label: str = "EntraUser"
     properties: EntraUserNodeProperties = EntraUserNodeProperties()
     sub_resource_relationship: EntraUserToTenantRel = EntraUserToTenantRel()
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(
+        [
+            "EntraIdentity",
+        ]
+    )