SOLVED

MCAS REST API Cloud Discovery Data

%3CLINGO-SUB%20id%3D%22lingo-sub-1624696%22%20slang%3D%22en-US%22%3EMCAS%20REST%20API%20Cloud%20Discovery%20Data%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1624696%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20REST%20API%20doesn't%20seem%20to%20expose%20Cloud%20Discovery%20data%2C%20this%20would%20be%20extremely%20useful%20for%20reporting%20with%20external%20tools.%20Is%20there%20a%20way%20this%20can%20be%20achieved%3F%20Is%20this%20roadmapped%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1624696%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECloud%20App%20Security%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EPower%20BI%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1625454%22%20slang%3D%22en-US%22%3ERE%3A%20MCAS%20REST%20API%20Cloud%20Discovery%20Data%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1625454%22%20slang%3D%22en-US%22%3EWe%20have%20been%20exploring%20exposing%20cloud%20discovery%20through%20our%20REST%20APIs.%20How%20were%20you%20thinking%20of%20using%20the%20data%3F%20Do%20you%20have%20a%20specific%20scenario%20in%20mind%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1640744%22%20slang%3D%22en-US%22%3ERE%3A%20MCAS%20REST%20API%20Cloud%20Discovery%20Data%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1640744%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F740088%22%20target%3D%22_blank%22%3E%40danbenj%3C%2FA%3E%26nbsp%3BPrimarily%20Power%20BI%20reports%20for%20to%20summarize%20and%20correlate%20app%20usage%20data%20for%20delivery%20to%20an%20applications%20team%2C%20so%20they%20can%20query%20shadow%20IT%20and%20provide%20verdicts%20on%20sanctioning%20status%20of%20apps.%20I%20can%20also%20see%20a%20use%20case%20for%20data%20flows%20between%20an%20ITSM%20and%20MCAS.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20can%20be%20done%20manually%20now%20via%20CSV%20exports%2C%20but%20it's%20a%20pain%2C%20and%20everything%20is%20nicer%20when%20it's%20automated%20and%20repeatable.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1662110%22%20slang%3D%22en-US%22%3ERE%3A%20MCAS%20REST%20API%20Cloud%20Discovery%20Data%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1662110%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F747548%22%20target%3D%22_blank%22%3E%40thehadricus%3C%2FA%3E%26nbsp%3Bthanks%20for%20the%20detailed%20response.%20We%20are%20currently%20looking%20at%20adding%20in%20an%20API%20endpoint%20for%20discovery%20data%20that%20will%20allow%20you%20to%20achieve%20that.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20do%20have%20a%20good%20suggestion%20for%20you%20though.%20MCAS%20has%20a%20built%20in%20integration%20with%20Sentinel%20that%20already%20receives%20discovery%20data.%20Sentinel%20has%20a%20connection%20with%20PowerBI%20with%20MCAS%20pre-built%20reports.%20How%20about%20trying%20that%20and%20sharing%20your%20feedback%3F%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1676346%22%20slang%3D%22en-US%22%3ERE%3A%20MCAS%20REST%20API%20Cloud%20Discovery%20Data%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1676346%22%20slang%3D%22en-US%22%3EGood%20suggestion%2C%20however%20we%20currently%20aren't%20using%20Sentinel%20and%20it%20would%20duplicate%20functionality%20of%20our%20existing%20SIEM.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1677166%22%20slang%3D%22en-US%22%3ERE%3A%20MCAS%20REST%20API%20Cloud%20Discovery%20Data%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1677166%22%20slang%3D%22en-US%22%3E%3CP%3EGot%20it.%20I%20believe%20that%20Discovery%20data%20would%20be%20available%20through%20our%20API%20by%20the%20end%20of%20Q1%202021.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

The REST API doesn't seem to expose Cloud Discovery data, this would be extremely useful for reporting with external tools. Is there a way this can be achieved? Is this roadmapped?

6 Replies
We have been exploring exposing cloud discovery through our REST APIs. How were you thinking of using the data? Do you have a specific scenario in mind?

@danbenj Primarily Power BI reports for to summarize and correlate app usage data for delivery to an applications team, so they can query shadow IT and provide verdicts on sanctioning status of apps. I can also see a use case for data flows between an ITSM and MCAS.

 

This can be done manually now via CSV exports, but it's a pain, and everything is nicer when it's automated and repeatable.

@thehadricus thanks for the detailed response. We are currently looking at adding in an API endpoint for discovery data that will allow you to achieve that.

 

I do have a good suggestion for you though. MCAS has a built in integration with Sentinel that already receives discovery data. Sentinel has a connection with PowerBI with MCAS pre-built reports. How about trying that and sharing your feedback?  

Good suggestion, however we currently aren't using Sentinel and it would duplicate functionality of our existing SIEM.
best response confirmed by thehadricus (Occasional Contributor)
Solution

Got it. I believe that Discovery data would be available through our API by the end of Q1 2021. 

@thehadricus have you managed to get mcas api discovery log data directly into power bi yet?
I was hoping you could share the power query you have used to achieve this?

www.000webhost.com