Mimecast Connectors: Migration to Log Ingestion API Eliminates Legacy Workspace Key Dependency

What Changed

Mimecast solution updated to version 3.1.0 with comprehensive migration from legacy Log Analytics ingestion to Azure Monitor Log Ingestion API. All five Mimecast Function App connectors (AT, Audit, Cloud Integrated, SEG, TTP) now use DCR-based ingestion instead of workspace keys.

Security Impact (Visibility & Fidelity)

The migration eliminates dependency on legacy workspace keys and SharedKey authentication. Deployments using previous versions relied on hardcoded workspace credentials that are being deprecated. The new implementation requires Azure service principal credentials and DCR configuration - ensuring more secure, scalable ingestion aligned with Microsofts current data collection architecture.

Connector authentication now uses Azure client credentials with proper scope handling for government cloud environments. Table name customization is now supported through environment variables, providing deployment flexibility while maintaining data consistency.

Affected Files

Solutions/Mimecast/Data Connectors/MimecastAT/SharedCode/sentinel.py
Solutions/Mimecast/Data Connectors/MimecastAudit/SharedCode/sentinel.py
Solutions/Mimecast/Data Connectors/MimecastCloudIntegrated/SharedCode/sentinel.py
Solutions/Mimecast/Data Connectors/MimecastSEG/SharedCode/sentinel.py
Solutions/Mimecast/Data Connectors/MimecastTTP/SharedCode/sentinel.py
Solutions/Mimecast/Analytic Rules/MimecastTTP/Mimecast_TTP_Url.yaml
Solutions/Mimecast/Parsers/MimecastAT/Mimecast_AT_Performane_Detail.yaml
Solutions/Mimecast/Parsers/MimecastAT/Mimecast_AT_Safe_Score.yaml
Solutions/Mimecast/Parsers/MimecastAT/Mimecast_AT_User_Data.yaml
Solutions/Mimecast/Parsers/MimecastAT/Mimecast_AT_Watchlist.yaml
Solutions/Mimecast/Parsers/MimecastAudit/Mimecast_Audit.yaml
Solutions/Mimecast/Parsers/MimecastCI/Mimecast_Cloud_Integrated.yaml
Solutions/Mimecast/Parsers/MimecastSEG/Mimecast_SEG_CG.yaml
Solutions/Mimecast/Parsers/MimecastSEG/Mimecast_SEG_DLP.yaml
Solutions/Mimecast/Parsers/MimecastTTP/Mimecast_TTP_Attachment.yaml
Solutions/Mimecast/Parsers/MimecastTTP/Mimecast_TTP_Impersonation.yaml
Solutions/Mimecast/Parsers/MimecastTTP/Mimecast_TTP_Url.yaml
(packaging artefacts: mainTemplate.json, createUiDefinition.json, SolutionMetadata.json)