Merge pull request #507 from briandelmsft/python312

briandelmsft · web-flow · commit 6ca9756b40ae · 2026-01-02T10:08:08.000-05:00
Updated Deployment for Python v3.12 &amp; STAT v2.3.0
diff --git a/Deploy/GrantPermissions.ps1 b/Deploy/GrantPermissions.ps1
@@ -166,6 +166,8 @@ Set-APIPermissions -MSIName $STATIdentityName -AppId "00000003-0000-0000-c000-00
 Set-APIPermissions -MSIName $STATIdentityName -AppId "8ee8fdad-f234-4243-8f3b-15c294843740" -PermissionName "AdvancedHunting.Read.All"
 Set-APIPermissions -MSIName $STATIdentityName -AppId "00000003-0000-0000-c000-000000000000" -PermissionName "IdentityRiskyUser.Read.All"
 Set-APIPermissions -MSIName $STATIdentityName -AppId "00000003-0000-0000-c000-000000000000" -PermissionName "IdentityRiskEvent.Read.All"
+Set-APIPermissions -MSIName $STATIdentityName -AppId "00000003-0000-0000-c000-000000000000" -PermissionName "SecurityAnalyzedMessage.Read.All" #Not supported in GCC/GCC High/DoD
+Set-APIPermissions -MSIName $STATIdentityName -AppId "00000003-0000-0000-c000-000000000000" -PermissionName "ThreatIntelligence.Read.All" #Not supported in GCC/GCC High/DoD
 
 #Triage-Content Sample
 if ( $PSBoundParameters.ContainsKey('SampleLogicAppName') ) {
diff --git a/Deploy/deployui.json b/Deploy/deployui.json
@@ -516,7 +516,7 @@
                                 "type": "Microsoft.Common.TextBox",
                                 "label": "STAT Function ZIP Package",
                                 "placeholder": "",
-                                "defaultValue": "https://github.com/briandelmsft/STAT-Function/releases/download/v2.2.0/stat.zip",
+                                "defaultValue": "https://github.com/briandelmsft/STAT-Function/releases/download/v2.3.0/stat.zip",
                                 "toolTip": "Full path to the STAT Function ZIP deployment package",
                                 "constraints": {
                                     "required": true,
@@ -550,7 +550,7 @@
             "STATConnectorName": "[coalesce(steps('namingStep').customNaming.statConnectorName, 'SentinelTriageAssistantv2')]",
             "STATConnectorDisplayName": "[coalesce(steps('namingStep').customNaming.statConnectorDisplayName, 'STAT v2')]",
             "storageAccountType": "Standard_LRS",
-            "FunctionPackage": "[coalesce(steps('additionalStep').advanced.functionPackage, 'https://github.com/briandelmsft/STAT-Function/releases/download/v2.2.0/stat.zip')]",
+            "FunctionPackage": "[coalesce(steps('additionalStep').advanced.functionPackage, 'https://github.com/briandelmsft/STAT-Function/releases/download/v2.3.0/stat.zip')]",
             "MSGraphEndpoint": "[coalesce(steps('apiStep').customApi.graphApi,'graph.microsoft.com')]",
             "M365Endpoint": "[coalesce(steps('apiStep').customApi.m365Api,'api.security.microsoft.com')]",
             "MDEEndpoint": "[coalesce(steps('apiStep').customApi.mdeApi,'api.securitycenter.microsoft.com')]",
diff --git a/Deploy/statdeploy.json b/Deploy/statdeploy.json
@@ -135,28 +135,12 @@
                 "allowBlobPublicAccess": false
             }
         },
-        {
-            "type": "Microsoft.Web/serverfarms",
-            "apiVersion": "2021-02-01",
-            "name": "[variables('functionName')]",
-            "location": "[parameters('location')]",
-            "sku": {
-                "name": "Y1",
-                "tier": "Dynamic",
-                "size": "Y1",
-                "family": "Y"
-            },
-            "properties": {
-                "reserved": true
-            }
-        },
         {
             "condition": "[equals(parameters('identityType'), 'sp')]",
             "apiVersion": "2019-10-01",
             "name": "STATFunctionSP",
             "type": "Microsoft.Resources/deployments",
             "dependsOn": [
-                "[resourceId('Microsoft.Web/serverfarms', variables('functionName'))]",
                 "[resourceId('Microsoft.Storage/storageAccounts', variables('storageAccountName'))]"
             ],
             "properties": {
@@ -229,7 +213,6 @@
             "name": "STATFunctionSystemId",
             "type": "Microsoft.Resources/deployments",
             "dependsOn": [
-                "[resourceId('Microsoft.Web/serverfarms', variables('functionName'))]",
                 "[resourceId('Microsoft.Storage/storageAccounts', variables('storageAccountName'))]"
             ],
             "properties": {
@@ -296,7 +279,6 @@
             "name": "STATFunctionUser",
             "type": "Microsoft.Resources/deployments",
             "dependsOn": [
-                "[resourceId('Microsoft.Web/serverfarms', variables('functionName'))]",
                 "[resourceId('Microsoft.Storage/storageAccounts', variables('storageAccountName'))]"
             ],
             "properties": {
diff --git a/Function/ServicePrincipalIdentity.json b/Function/ServicePrincipalIdentity.json
@@ -107,9 +107,8 @@
                 "reserved": true,
                 "httpsOnly": true,
                 "clientAffinityEnabled": true,
-                "serverFarmId": "[resourceId('Microsoft.Web/serverfarms', parameters('STATFunctionName'))]",
                 "siteConfig": {
-                    "linuxFxVersion": "PYTHON|3.10",
+                    "linuxFxVersion": "PYTHON|3.12",
                     "appSettings": [
                         {
                             "name": "AzureWebJobsStorage",
@@ -224,4 +223,4 @@
             "value": "[reference(resourceId('Microsoft.Web/sites', parameters('STATFunctionName'))).defaultHostName]"
         }
     }
-}
+}
diff --git a/Function/SystemIdentity.json b/Function/SystemIdentity.json
@@ -95,9 +95,8 @@
                 "reserved": true,
                 "httpsOnly": true,
                 "clientAffinityEnabled": true,
-                "serverFarmId": "[resourceId('Microsoft.Web/serverfarms', parameters('STATFunctionName'))]",
                 "siteConfig": {
-                    "linuxFxVersion": "PYTHON|3.10",
+                    "linuxFxVersion": "PYTHON|3.12",
                     "appSettings": [
                         {
                             "name": "AzureWebJobsStorage",
@@ -204,4 +203,4 @@
             "value": "[reference(resourceId('Microsoft.Web/sites', parameters('STATFunctionName'))).defaultHostName]"
         }
     }
-}
+}
diff --git a/Function/UserAssignedIdentity.json b/Function/UserAssignedIdentity.json
@@ -107,9 +107,8 @@
                 "reserved": true,
                 "httpsOnly": true,
                 "clientAffinityEnabled": true,
-                "serverFarmId": "[resourceId('Microsoft.Web/serverfarms', parameters('STATFunctionName'))]",
                 "siteConfig": {
-                    "linuxFxVersion": "PYTHON|3.10",
+                    "linuxFxVersion": "PYTHON|3.12",
                     "appSettings": [
                         {
                             "name": "AzureWebJobsStorage",
@@ -220,4 +219,4 @@
             "value": "[reference(resourceId('Microsoft.Web/sites', parameters('STATFunctionName'))).defaultHostName]"
         }
     }
-}
+}

Original file line number	Diff line number	Diff line change
`@@ -107,9 +107,8 @@`
`107`	`107`	`"reserved": true,`
`108`	`108`	`"httpsOnly": true,`
`109`	`109`	`"clientAffinityEnabled": true,`
`110`		`- "serverFarmId": "[resourceId('Microsoft.Web/serverfarms', parameters('STATFunctionName'))]",`
`111`	`110`	`"siteConfig": {`
`112`		`- "linuxFxVersion": "PYTHON\|3.10",`
	`111`	`+ "linuxFxVersion": "PYTHON\|3.12",`
`113`	`112`	`"appSettings": [`
`114`	`113`	`{`
`115`	`114`	`"name": "AzureWebJobsStorage",`
`@@ -224,4 +223,4 @@`
`224`	`223`	`"value": "[reference(resourceId('Microsoft.Web/sites', parameters('STATFunctionName'))).defaultHostName]"`
`225`	`224`	`}`
`226`	`225`	`}`
`227`		`-}`
	`226`	`+}`
Original file line number	Diff line number	Diff line change
`@@ -95,9 +95,8 @@`
`95`	`95`	`"reserved": true,`
`96`	`96`	`"httpsOnly": true,`
`97`	`97`	`"clientAffinityEnabled": true,`
`98`		`- "serverFarmId": "[resourceId('Microsoft.Web/serverfarms', parameters('STATFunctionName'))]",`
`99`	`98`	`"siteConfig": {`
`100`		`- "linuxFxVersion": "PYTHON\|3.10",`
	`99`	`+ "linuxFxVersion": "PYTHON\|3.12",`
`101`	`100`	`"appSettings": [`
`102`	`101`	`{`
`103`	`102`	`"name": "AzureWebJobsStorage",`
`@@ -204,4 +203,4 @@`
`204`	`203`	`"value": "[reference(resourceId('Microsoft.Web/sites', parameters('STATFunctionName'))).defaultHostName]"`
`205`	`204`	`}`
`206`	`205`	`}`
`207`		`-}`
	`206`	`+}`