question

AntonKrutov-9425 avatar image
0 Votes"
AntonKrutov-9425 asked AnshulKumarMINDTREELIMITED-5501 commented

AIP Scanner pulling results via graph

Hello,

Is there an endpoint to pull scan results (reports) from AIP? So, I'm looking to get things like repository, file names etc. of what the AIP Scanner has found.

I can see a whole lot of things has been found by the scanner, but now I would like to pull that information via REST call.

Thank you in advance

azure-information-protection
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi, if the posted answer resolves your question, please mark it as the answer by clicking the check mark. Doing so helps others find answers to their questions.

0 Votes 0 ·
JamesTran-MSFT avatar image
0 Votes"
JamesTran-MSFT answered

@AntonKrutov-9425
Thank you for your post and I apologize for the delayed response!

When it comes to the Azure Information Protection REST APIs, as of right now, you can only access alerts by using the Microsoft Graph Security API, or you can stream alerts to SIEM solutions, such as Splunk and IBM Qradar, by using Azure Monitor. Please keep in mind that support for Microsoft Graph Security is currently in preview.

For more information about the Microsoft Graph Security API, see Microsoft Graph Security API overview.


Additional Links:
Microsoft Information Protection SDK - API concepts
AzureInformationProtection PowerShell


If you'd like the AIP scanner to be integrated into REST APIs, I'd recommend leveraging the Azure Information Protection feature request form, and submitting a request so our engineering team can look into implementing this. For more info.


If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.


Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AntonKrutov-9425 avatar image
1 Vote"
AntonKrutov-9425 answered

Hi @JamesTran-MSFT

I was able to find what I'm looking by using Log Analytics API, which is the same API that is being called when you visit the analytics pane on the AIP. So, I adjusted the permissions and was able to retrieve the data I'm looking for. Is that API not something we should be using to retrieve such data?

Thank you,

Anton

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.