Update azuredeploy.json

Azure · Dec 18, 2023 · 52b6ce2 · 52b6ce2
1 parent 06e04b9
commit 52b6ce2
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/...Australian Cyber Security Centre/Playbooks/AusCtisExportTaggedIndicators/azuredeploy.json b/...Australian Cyber Security Centre/Playbooks/AusCtisExportTaggedIndicators/azuredeploy.json
@@ -379,7 +379,6 @@
                                                 "identity_class": "organization",
                                                 "modified": "@formatDateTime(string(utcNow()), 'yyyy-MM-ddTHH:mm:ss.ffffffK')",
                                                 "name": "CTIS",
-                                                "object_marking_refs": "@union(variables('AllMarkingRefObjIds'), variables('MarkingRefsObjIds'))",
                                                 "spec_version": "2.1",
                                                 "type": "identity"
                                             }
@@ -522,6 +521,7 @@
                                     "type": "Compose",
                                     "inputs": {
                                         "created": "@formatDateTime(string(items('For_each_Indicator')?['properties']?['created']), 'yyyy-MM-ddTHH:mm:ss.ffffffK')",
+                                        "created_by_ref": "@variables('CreatedByRefObjId')",
                                         "id": "@variables('IndicatorId')",
                                         "modified": "@addSeconds(formatDateTime(string(items('For_each_Indicator')?['properties']?['lastUpdatedTimeUtc'])), 5, 'yyyy-MM-ddTHH:mm:ss.ffffffK')",
                                         "pattern": "@items('For_each_Indicator')?['properties']?['pattern']",
@@ -1902,7 +1902,7 @@
                                 "retryPolicy": {
                                     "type": "none"
                                 },
-                               "uri": "[uriComponentToString(uri(variables('azure'),'subscriptions/@{parameters(''SubscriptionID'')}/resourceGroups/@{parameters(''ResourceGroup'')}/providers/Microsoft.OperationalInsights/workspaces/@{parameters(''Workspace'')}/providers/Microsoft.SecurityInsights/threatIntelligence/main/queryIndicators?api-version=2022-06-01-preview'))]"
+                                "uri": "[uriComponentToString(uri(variables('azure'),'subscriptions/@{parameters(''SubscriptionID'')}/resourceGroups/@{parameters(''ResourceGroup'')}/providers/Microsoft.OperationalInsights/workspaces/@{parameters(''Workspace'')}/providers/Microsoft.SecurityInsights/threatIntelligence/main/queryIndicators?api-version=2022-06-01-preview'))]"
                             }
                         },
                         "Initialize_array_AllMarkingRefObjIds": {