What Changed
Updated KQL queries in the Azure Security Benchmark workbook to use proper parameter filtering syntax. The workbook queries now correctly filter compliance data using the {ComplianceDomain} parameter instead of the previous has (ComplianceDomain) filter logic.
Query Logic Fixes
Two primary workbook visualizations were updated:
- Recommendations by Control Area: Query now uses where ComplianceDomain in ({ComplianceDomain}) for proper parameter-based filtering
- Resource compliance summary: Aligned filtering logic to match the parameter selection mechanism
The queries maintain the same data source (Microsoft.Security regulatory compliance tables) and continue to map compliance controls to domains like Asset Management, Data Protection, Identity Management, etc.
Packaging Updates
Solution artifacts updated to version 3.0.4 with refreshed ARM template content and workbook JSON synchronized across deployment artifacts.
Affected Files
Solutions/AzureSecurityBenchmark/Workbooks/AzureSecurityBenchmark.json
(packaging artefacts: 3.0.4.zip, ReleaseNotes.md, mainTemplate.json)