cartography 0.93.0rc1__py3-none-any.whl → 0.123.0__py3-none-any.whl

cartography/models/azure/vm/disk.py

@@ -0,0 +1,55 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class AzureDiskProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    name: PropertyRef = PropertyRef("name")
+    location: PropertyRef = PropertyRef("location")
+    resourcegroup: PropertyRef = PropertyRef("resource_group")
+    type: PropertyRef = PropertyRef("type")
+    createoption: PropertyRef = PropertyRef("creation_data.create_option")
+    disksizegb: PropertyRef = PropertyRef("disk_size_gb")
+    encryption: PropertyRef = PropertyRef("encryption_settings_collection.enabled")
+    maxshares: PropertyRef = PropertyRef("max_shares")
+    network_access_policy: PropertyRef = PropertyRef("network_access_policy")
+    ostype: PropertyRef = PropertyRef("os_type")
+    tier: PropertyRef = PropertyRef("tier")
+    sku: PropertyRef = PropertyRef("sku.name")
+    zones: PropertyRef = PropertyRef("zones")
+
+
+@dataclass(frozen=True)
+class AzureDiskToSubscriptionRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:AzureSubscription)-[:RESOURCE]->(:AzureDisk)
+class AzureDiskToSubscriptionRel(CartographyRelSchema):
+    target_node_label: str = "AzureSubscription"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AZURE_SUBSCRIPTION_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: AzureDiskToSubscriptionRelProperties = (
+        AzureDiskToSubscriptionRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AzureDiskSchema(CartographyNodeSchema):
+    label: str = "AzureDisk"
+    properties: AzureDiskProperties = AzureDiskProperties()
+    sub_resource_relationship: AzureDiskToSubscriptionRel = AzureDiskToSubscriptionRel()

cartography/models/azure/vm/snapshot.py

@@ -0,0 +1,56 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class AzureSnapshotProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    resourcegroup: PropertyRef = PropertyRef("resource_group")
+    type: PropertyRef = PropertyRef("type")
+    location: PropertyRef = PropertyRef("location")
+    name: PropertyRef = PropertyRef("name")
+    createoption: PropertyRef = PropertyRef("creation_data.create_option")
+    disksizegb: PropertyRef = PropertyRef("disk_size_gb")
+    encryption: PropertyRef = PropertyRef("encryption_settings_collection.enabled")
+    incremental: PropertyRef = PropertyRef("incremental")
+    network_access_policy: PropertyRef = PropertyRef("network_access_policy")
+    ostype: PropertyRef = PropertyRef("os_type")
+    tier: PropertyRef = PropertyRef("tier")
+    sku: PropertyRef = PropertyRef("sku.name")
+
+
+@dataclass(frozen=True)
+class AzureSnapshotToSubscriptionRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:AzureSubscription)-[:RESOURCE]->(:AzureSnapshot)
+class AzureSnapshotToSubscriptionRel(CartographyRelSchema):
+    target_node_label: str = "AzureSubscription"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AZURE_SUBSCRIPTION_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: AzureSnapshotToSubscriptionRelProperties = (
+        AzureSnapshotToSubscriptionRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AzureSnapshotSchema(CartographyNodeSchema):
+    label: str = "AzureSnapshot"
+    properties: AzureSnapshotProperties = AzureSnapshotProperties()
+    sub_resource_relationship: AzureSnapshotToSubscriptionRel = (
+        AzureSnapshotToSubscriptionRel()
+    )

cartography/models/azure/vm/virtualmachine.py

@@ -0,0 +1,59 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class AzureVirtualMachineProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    name: PropertyRef = PropertyRef("name")
+    location: PropertyRef = PropertyRef("location")
+    resourcegroup: PropertyRef = PropertyRef("resource_group")
+    type: PropertyRef = PropertyRef("type")
+    plan: PropertyRef = PropertyRef("plan.product")
+    size: PropertyRef = PropertyRef("hardware_profile.vm_size")
+    license_type: PropertyRef = PropertyRef("license_type")
+    computer_name: PropertyRef = PropertyRef("os_profile.computer_name")
+    identity_type: PropertyRef = PropertyRef("identity.type")
+    zones: PropertyRef = PropertyRef("zones")
+    ultra_ssd_enabled: PropertyRef = PropertyRef(
+        "additional_capabilities.ultra_ssd_enabled"
+    )
+    priority: PropertyRef = PropertyRef("priority")
+    eviction_policy: PropertyRef = PropertyRef("eviction_policy")
+
+
+@dataclass(frozen=True)
+class AzureVirtualMachineToSubscriptionRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:AzureSubscription)-[:RESOURCE]->(:AzureVirtualMachine)
+class AzureVirtualMachineToSubscriptionRel(CartographyRelSchema):
+    target_node_label: str = "AzureSubscription"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AZURE_SUBSCRIPTION_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: AzureVirtualMachineToSubscriptionRelProperties = (
+        AzureVirtualMachineToSubscriptionRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AzureVirtualMachineSchema(CartographyNodeSchema):
+    label: str = "AzureVirtualMachine"
+    properties: AzureVirtualMachineProperties = AzureVirtualMachineProperties()
+    sub_resource_relationship: AzureVirtualMachineToSubscriptionRel = (
+        AzureVirtualMachineToSubscriptionRel()
+    )

cartography/models/bigfix/bigfix_computer.py

@@ -12,58 +12,62 @@ from cartography.models.core.relationships import TargetNodeMatcher
 
 @dataclass(frozen=True)
 class BigfixComputerNodeProperties(CartographyNodeProperties):
-    id: PropertyRef = PropertyRef('ID')
-    lastupdated: PropertyRef = PropertyRef('lastupdated', set_in_kwargs=True)
-    activedirectorypath: PropertyRef = PropertyRef('ActiveDirectoryPath')
-    agenttype: PropertyRef = PropertyRef('AgentType')
-    agentversion: PropertyRef = PropertyRef('AgentVersion')
-    averageevaluationcycle: PropertyRef = PropertyRef('AverageEvaluationCycle')
-    besrelayselectionmethod: PropertyRef = PropertyRef('BESRelaySelectionMethod')
-    besrootserver: PropertyRef = PropertyRef('BESRootServer')
-    bios: PropertyRef = PropertyRef('BIOS')
-    computertype: PropertyRef = PropertyRef('ComputerType')
-    computername: PropertyRef = PropertyRef('ComputerName')
-    cpu: PropertyRef = PropertyRef('CPU')
-    devicetype: PropertyRef = PropertyRef('DeviceType')
-    distancetobesrelay: PropertyRef = PropertyRef('DistanceToBESRelay')
-    dnsname: PropertyRef = PropertyRef('DNSName')
-    enrollmentdatetime: PropertyRef = PropertyRef('EnrollmentDateTime')
-    freespaceonsystemdrive: PropertyRef = PropertyRef('FreeSpaceOnSystemDrive')
-    ipaddress: PropertyRef = PropertyRef('IPAddress')
-    ipv6address: PropertyRef = PropertyRef('IPv6Address')
-    islocked: PropertyRef = PropertyRef('IsLocked')
-    lastreporttime: PropertyRef = PropertyRef('LastReportDateTime')
-    locationbyiprange: PropertyRef = PropertyRef('LocationByIPRange')
-    loggedonuser: PropertyRef = PropertyRef('LoggedonUser')
-    macaddress: PropertyRef = PropertyRef('MACAddress')
-    os: PropertyRef = PropertyRef('OS')
-    providername: PropertyRef = PropertyRef('ProviderName')
-    ram: PropertyRef = PropertyRef('RAM')
-    relay: PropertyRef = PropertyRef('Relay')
-    remotedesktopisenabled: PropertyRef = PropertyRef('RemoteDesktopIsEnabled')
-    subnetaddress: PropertyRef = PropertyRef('SubnetAddress')
-    totalsizeofsystemdrive: PropertyRef = PropertyRef('TotalSizeOfSystemDrive')
-    username: PropertyRef = PropertyRef('UserName')
+    id: PropertyRef = PropertyRef("ID")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    activedirectorypath: PropertyRef = PropertyRef("ActiveDirectoryPath")
+    agenttype: PropertyRef = PropertyRef("AgentType")
+    agentversion: PropertyRef = PropertyRef("AgentVersion")
+    averageevaluationcycle: PropertyRef = PropertyRef("AverageEvaluationCycle")
+    besrelayselectionmethod: PropertyRef = PropertyRef("BESRelaySelectionMethod")
+    besrootserver: PropertyRef = PropertyRef("BESRootServer")
+    bios: PropertyRef = PropertyRef("BIOS")
+    computertype: PropertyRef = PropertyRef("ComputerType")
+    computername: PropertyRef = PropertyRef("ComputerName", extra_index=True)
+    cpu: PropertyRef = PropertyRef("CPU")
+    devicetype: PropertyRef = PropertyRef("DeviceType")
+    distancetobesrelay: PropertyRef = PropertyRef("DistanceToBESRelay")
+    dnsname: PropertyRef = PropertyRef("DNSName")
+    enrollmentdatetime: PropertyRef = PropertyRef("EnrollmentDateTime")
+    freespaceonsystemdrive: PropertyRef = PropertyRef("FreeSpaceOnSystemDrive")
+    ipaddress: PropertyRef = PropertyRef("IPAddress")
+    ipv6address: PropertyRef = PropertyRef("IPv6Address")
+    islocked: PropertyRef = PropertyRef("IsLocked")
+    lastreporttime: PropertyRef = PropertyRef("LastReportDateTime")
+    locationbyiprange: PropertyRef = PropertyRef("LocationByIPRange")
+    loggedonuser: PropertyRef = PropertyRef("LoggedonUser")
+    macaddress: PropertyRef = PropertyRef("MACAddress")
+    os: PropertyRef = PropertyRef("OS")
+    providername: PropertyRef = PropertyRef("ProviderName")
+    ram: PropertyRef = PropertyRef("RAM")
+    relay: PropertyRef = PropertyRef("Relay")
+    remotedesktopisenabled: PropertyRef = PropertyRef("RemoteDesktopIsEnabled")
+    subnetaddress: PropertyRef = PropertyRef("SubnetAddress")
+    totalsizeofsystemdrive: PropertyRef = PropertyRef("TotalSizeOfSystemDrive")
+    username: PropertyRef = PropertyRef("UserName")
 
 
 @dataclass(frozen=True)
 class BigfixComputerToBigfixRootRelProperties(CartographyRelProperties):
-    lastupdated: PropertyRef = PropertyRef('lastupdated', set_in_kwargs=True)
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
 
 
 @dataclass(frozen=True)
 class BigfixComputerToBigfixRootRel(CartographyRelSchema):
-    target_node_label: str = 'BigfixRoot'
+    target_node_label: str = "BigfixRoot"
     target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
-        {'id': PropertyRef('ROOT_URL', set_in_kwargs=True)},
+        {"id": PropertyRef("ROOT_URL", set_in_kwargs=True)},
     )
     direction: LinkDirection = LinkDirection.INWARD
     rel_label: str = "RESOURCE"
-    properties: BigfixComputerToBigfixRootRelProperties = BigfixComputerToBigfixRootRelProperties()
+    properties: BigfixComputerToBigfixRootRelProperties = (
+        BigfixComputerToBigfixRootRelProperties()
+    )
 
 
 @dataclass(frozen=True)
 class BigfixComputerSchema(CartographyNodeSchema):
-    label: str = 'BigfixComputer'
+    label: str = "BigfixComputer"
     properties: BigfixComputerNodeProperties = BigfixComputerNodeProperties()
-    sub_resource_relationship: BigfixComputerToBigfixRootRel = BigfixComputerToBigfixRootRel()
+    sub_resource_relationship: BigfixComputerToBigfixRootRel = (
+        BigfixComputerToBigfixRootRel()
+    )

cartography/models/bigfix/bigfix_root.py

@@ -7,11 +7,11 @@ from cartography.models.core.nodes import CartographyNodeSchema
 
 @dataclass(frozen=True)
 class BigfixRootNodeProperties(CartographyNodeProperties):
-    id: PropertyRef = PropertyRef('id')
-    lastupdated: PropertyRef = PropertyRef('lastupdated', set_in_kwargs=True)
+    id: PropertyRef = PropertyRef("id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
 
 
 @dataclass(frozen=True)
 class BigfixRootSchema(CartographyNodeSchema):
-    label: str = 'BigfixRoot'
+    label: str = "BigfixRoot"
     properties: BigfixRootNodeProperties = BigfixRootNodeProperties()

cartography/models/cloudflare/account.py

@@ -0,0 +1,25 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+
+
+@dataclass(frozen=True)
+class CloudflareAccountNodeProperties(CartographyNodeProperties):
+    created_on: PropertyRef = PropertyRef("created_on")
+    name: PropertyRef = PropertyRef("name")
+    abuse_contact_email: PropertyRef = PropertyRef("settings.abuse_contact_email")
+    default_nameservers: PropertyRef = PropertyRef("settings.default_nameservers")
+    enforce_twofactor: PropertyRef = PropertyRef("settings.enforce_twofactor")
+    use_account_custom_ns_by_default: PropertyRef = PropertyRef(
+        "settings.use_account_custom_ns_by_default"
+    )
+    id: PropertyRef = PropertyRef("id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class CloudflareAccountSchema(CartographyNodeSchema):
+    label: str = "CloudflareAccount"
+    properties: CloudflareAccountNodeProperties = CloudflareAccountNodeProperties()

cartography/models/cloudflare/dnsrecord.py

@@ -0,0 +1,55 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class CloudflareDNSRecordNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    name: PropertyRef = PropertyRef("name", extra_index=True)
+    value: PropertyRef = PropertyRef("content")
+    type: PropertyRef = PropertyRef("type")
+    comment: PropertyRef = PropertyRef("comment")
+    proxied: PropertyRef = PropertyRef("proxied")
+    ttl: PropertyRef = PropertyRef("ttl")
+    created_on: PropertyRef = PropertyRef("created_on")
+    modified_on: PropertyRef = PropertyRef("modified_on")
+    proxiable: PropertyRef = PropertyRef("proxiable")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class CloudflareDNSRecordToZoneRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:CloudflareDNSRecord)<-[:RESOURCE]-(:CloudflareZone)
+class CloudflareDNSRecordToZoneRel(CartographyRelSchema):
+    target_node_label: str = "CloudflareZone"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("zone_id", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: CloudflareDNSRecordToZoneRelProperties = (
+        CloudflareDNSRecordToZoneRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class CloudflareDNSRecordSchema(CartographyNodeSchema):
+    label: str = "CloudflareDNSRecord"
+    properties: CloudflareDNSRecordNodeProperties = CloudflareDNSRecordNodeProperties()
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(["DNSRecord"])
+    sub_resource_relationship: CloudflareDNSRecordToZoneRel = (
+        CloudflareDNSRecordToZoneRel()
+    )

cartography/models/cloudflare/member.py

@@ -0,0 +1,86 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class CloudflareMemberNodeProperties(CartographyNodeProperties):
+    status: PropertyRef = PropertyRef("status")
+    email: PropertyRef = PropertyRef("user.email")
+    firstname: PropertyRef = PropertyRef("user.first_name")
+    user_id: PropertyRef = PropertyRef("user.id")
+    lastname: PropertyRef = PropertyRef("user.last_name")
+    two_factor_authentication_enabled: PropertyRef = PropertyRef(
+        "user.two_factor_authentication_enabled"
+    )
+    id: PropertyRef = PropertyRef("id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class CloudflareMemberToAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:CloudflareMember)<-[:RESOURCE]-(:CloudflareAccount)
+class CloudflareMemberToAccountRel(CartographyRelSchema):
+    target_node_label: str = "CloudflareAccount"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("account_id", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: CloudflareMemberToAccountRelProperties = (
+        CloudflareMemberToAccountRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class CloudflareMemberToCloudflareRoleProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:CloudflareRole)<-[:HAS_ROLE]-(:CloudflareMember)
+class CloudflareMemberToCloudflareRoleRel(CartographyRelSchema):
+    target_node_label: str = "CloudflareRole"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "id": PropertyRef(
+                "roles_ids",
+                one_to_many=True,
+            )
+        },
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "HAS_ROLE"
+    properties: CloudflareMemberToCloudflareRoleProperties = (
+        CloudflareMemberToCloudflareRoleProperties()
+    )
+
+
+@dataclass(frozen=True)
+class CloudflareMemberSchema(CartographyNodeSchema):
+    label: str = "CloudflareMember"
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(
+        ["UserAccount"]
+    )  # UserAccount label is used for ontology mapping
+    properties: CloudflareMemberNodeProperties = CloudflareMemberNodeProperties()
+    sub_resource_relationship: CloudflareMemberToAccountRel = (
+        CloudflareMemberToAccountRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            CloudflareMemberToCloudflareRoleRel(),
+        ],
+    )

cartography/models/cloudflare/role.py

@@ -0,0 +1,44 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class CloudflareRoleNodeProperties(CartographyNodeProperties):
+    description: PropertyRef = PropertyRef("description")
+    name: PropertyRef = PropertyRef("name")
+    id: PropertyRef = PropertyRef("id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class CloudflareRoleToAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:CloudflareRole)<-[:RESOURCE]-(:CloudflareAccount)
+class CloudflareRoleToAccountRel(CartographyRelSchema):
+    target_node_label: str = "CloudflareAccount"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("account_id", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: CloudflareRoleToAccountRelProperties = (
+        CloudflareRoleToAccountRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class CloudflareRoleSchema(CartographyNodeSchema):
+    label: str = "CloudflareRole"
+    properties: CloudflareRoleNodeProperties = CloudflareRoleNodeProperties()
+    sub_resource_relationship: CloudflareRoleToAccountRel = CloudflareRoleToAccountRel()

cartography/models/cloudflare/zone.py

@@ -0,0 +1,59 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class CloudflareZoneNodeProperties(CartographyNodeProperties):
+    activated_on: PropertyRef = PropertyRef("activated_on")
+    created_on: PropertyRef = PropertyRef("created_on")
+    development_mode: PropertyRef = PropertyRef("development_mode")
+    cdn_only: PropertyRef = PropertyRef("meta.cdn_only")
+    custom_certificate_quota: PropertyRef = PropertyRef("meta.custom_certificate_quota")
+    dns_only: PropertyRef = PropertyRef("meta.dns_only")
+    foundation_dns: PropertyRef = PropertyRef("meta.foundation_dns")
+    page_rule_quota: PropertyRef = PropertyRef("meta.page_rule_quota")
+    phishing_detected: PropertyRef = PropertyRef("meta.phishing_detected")
+    modified_on: PropertyRef = PropertyRef("modified_on")
+    name: PropertyRef = PropertyRef("name")
+    original_dnshost: PropertyRef = PropertyRef("original_dnshost")
+    original_registrar: PropertyRef = PropertyRef("original_registrar")
+    status: PropertyRef = PropertyRef("status")
+    verification_key: PropertyRef = PropertyRef("verification_key")
+    id: PropertyRef = PropertyRef("id")
+    paused: PropertyRef = PropertyRef("paused")
+    type: PropertyRef = PropertyRef("type")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class CloudflareZoneToAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:CloudflareZone)<-[:RESOURCE]-(:CloudflareAccount)
+class CloudflareZoneToAccountRel(CartographyRelSchema):
+    target_node_label: str = "CloudflareAccount"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("account_id", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: CloudflareZoneToAccountRelProperties = (
+        CloudflareZoneToAccountRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class CloudflareZoneSchema(CartographyNodeSchema):
+    label: str = "CloudflareZone"
+    properties: CloudflareZoneNodeProperties = CloudflareZoneNodeProperties()
+    sub_resource_relationship: CloudflareZoneToAccountRel = CloudflareZoneToAccountRel()

cartography/models/core/common.py

@@ -8,7 +8,15 @@ class PropertyRef:
     (PropertyRef.set_in_kwargs=True).
     """
 
-    def __init__(self, name: str, set_in_kwargs=False, extra_index=False, ignore_case=False):
+    def __init__(
+        self,
+        name: str,
+        set_in_kwargs=False,
+        extra_index=False,
+        ignore_case=False,
+        fuzzy_and_ignore_case=False,
+        one_to_many=False,
+    ):
         """
         :param name: The name of the property
         :param set_in_kwargs: Optional. If True, the property is not defined on the data dict, and we expect to find the
@@ -33,13 +41,54 @@ class PropertyRef:
             cartography catalog of GitHubUser nodes. Therefore, you would need `ignore_case=True` in the PropertyRef
             that points to the GitHubUser node's name field, otherwise if one of your employees' GitHub usernames
             contains capital letters, you would not be able to map them properly to a GitHubUser node in your graph.
+        :param fuzzy_and_ignore_case: If True, performs a fuzzy + case-insensitive match when comparing the value of
+        this property using the `CONTAINS` operator.
+        query. Defaults to False. This only has effect as part of a TargetNodeMatcher and is not supported for the
+        sub resource relationship.
+        :param one_to_many: Indicates that this property is meant to create one-to-many associations. If set to True,
+        this property ref points to a list stored on the data dict where each item is an ID. Only has effect as
+        part of a TargetNodeMatcher and is not supported for the sub resource relationship. Defaults to False.
+            Example on why you would set this to True:
+            AWS IAM instance profiles can be associated with one or more roles. This is reflected in their API object:
+            when we call describe-iam-instance-profiles, the `Roles` field contains a list of all the roles that the
+            profile is associated with. So, to create AWSInstanceProfile nodes while attaching them to multiple roles,
+            we can create a CartographyRelSchema with
+            ```
+            class InstanceProfileSchema(Schema):
+                target_node_label: str = 'AWSRole'
+                target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+                    'arn': PropertyRef('Roles', one_to_many=True),
+                )
+                ...
+            ```
+            This means that as we create AWSInstanceProfile nodes, we will search for AWSRoles to attach to, and we do
+            this by checking if each role's `arn` field is in the `Roles` list of the data dict.
+        Note that one_to_many has no effect on matchlinks.
         """
         self.name = name
         self.set_in_kwargs = set_in_kwargs
         self.extra_index = extra_index
         self.ignore_case = ignore_case
+        self.fuzzy_and_ignore_case = fuzzy_and_ignore_case
+        self.one_to_many = one_to_many
+
+        if self.fuzzy_and_ignore_case and self.ignore_case:
+            raise ValueError(
+                f'Error setting PropertyRef "{self.name}": ignore_case cannot be used together with'
+                "fuzzy_and_ignore_case. Pick one or the other.",
+            )
+
+        if self.one_to_many and (self.ignore_case or self.fuzzy_and_ignore_case):
+            raise ValueError(
+                f'Error setting PropertyRef "{self.name}": one_to_many cannot be used together with '
+                "`ignore_case` or `fuzzy_and_ignore_case`.",
+            )
 
     def _parameterize_name(self) -> str:
+        """
+        Prefixes the name of the property ref with a '$' so that we can receive keyword args. See docs on __repr__ for
+        PropertyRef.
+        """
         return f"${self.name}"
 
     def __repr__(self) -> str:
@@ -55,4 +104,6 @@ class PropertyRef:
         querybuilder.build_ingestion_query(). This is used for things like applying the same update tag to all nodes of
         a given run.
         """
-        return f"item.{self.name}" if not self.set_in_kwargs else self._parameterize_name()
+        return (
+            f"item.{self.name}" if not self.set_in_kwargs else self._parameterize_name()
+        )