✨ Add Azure Data Factory and Synapse Analytics resources

Add azure.subscription.dataFactoryService with factory resource exposing
publicNetworkAccess, encryption, identity, and repo configuration.
Add azure.subscription.synapseService with workspace resource exposing
managedVirtualNetwork, publicNetworkAccess, encryption, and auth settings.
Bump Azure provider to 13.3.0.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: tas50

providers/azure/config/config.go

@@ -14,7 +14,7 @@ import (
 var Config = plugin.Provider{
 	Name:    "azure",
 	ID:      "go.mondoo.com/cnquery/v9/providers/azure",
-	Version: "13.2.0",
+	Version: "13.3.0",
 	ConnectionTypes: []string{
 		provider.ConnectionType,
 		string(azureinstancesnapshot.SnapshotConnectionType),

providers/azure/go.mod

@@ -17,6 +17,7 @@ require (
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/cosmos/armcosmos/v3 v3.4.0
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/cosmosforpostgresql/armcosmosforpostgresql v1.1.0
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/databricks/armdatabricks v1.1.0
+	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/datafactory/armdatafactory v1.3.0
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/iothub/armiothub v1.3.0
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault/v2 v2.0.2
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor v0.11.0
@@ -32,6 +33,7 @@ require (
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/security/armsecurity v0.14.0
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/sql/armsql v1.2.0
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage/v3 v3.0.0
+	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/synapse/armsynapse v0.8.0
 	github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azcertificates v1.4.0
 	github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.4.0
 	github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets v1.4.0

providers/azure/go.sum

@@ -108,6 +108,8 @@ github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/cosmosforpostgresql/armcos
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/cosmosforpostgresql/armcosmosforpostgresql v1.1.0/go.mod h1:s//ycXE53yRslaDdkNrCEANgvrdSOaUuqcBCJg5VEX0=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/databricks/armdatabricks v1.1.0 h1:rQyNHB/4ntzvm5F9WAiaAl7jWII+jaI4rL6sSWxTNeM=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/databricks/armdatabricks v1.1.0/go.mod h1:4jtknLqzaPtwIz8Y9NBp2rXxeA7BbSICWBD0FDzG2VM=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/datafactory/armdatafactory v1.3.0 h1:pmKRJksZidUYbOMQ2wtVm4L9q0BadVfBsF/fPKUUnjg=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/datafactory/armdatafactory v1.3.0/go.mod h1:CmZkcUHLqzY7I+io4fQda7G1ZJ/4R0b3/iPFzEWWl7E=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v2 v2.0.0 h1:PTFGRSlMKCQelWwxUyYVEUqseBJVemLyqWJjvMyt0do=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v2 v2.0.0/go.mod h1:LRr2FzBTQlONPPa5HREE5+RjSCTXl7BwOvYOaWTqCaI=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v3 v3.1.1 h1:1kpY4qe+BGAH2ykv4baVSqyx+AY5VjXeJ15SldlU6hs=
@@ -146,6 +148,8 @@ github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/sql/armsql v1.2.0 h1:S087d
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/sql/armsql v1.2.0/go.mod h1:B4cEyXrWBmbfMDAPnpJ1di7MAt5DKP57jPEObAvZChg=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage/v3 v3.0.0 h1:tqGq5xt/rNU57Eb52rf6bvrNWoKPSwLDVUQrJnF4C5U=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage/v3 v3.0.0/go.mod h1:HfDdtu9K0iFBSMMxFsHJPkAAxFWd2IUOW8HU8kEdF3Y=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/synapse/armsynapse v0.8.0 h1:IKCilT2DdxjeCXhiCIZb5hywpA1KDGKwpdA1WL20wT0=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/synapse/armsynapse v0.8.0/go.mod h1:IzuvA34YNVnlifc1+KhCouAKEf1VYzV439FOpyfTHzA=
 github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azcertificates v1.4.0 h1:mtvR5ZXH5Ew6PSONd5lO5OXovWP1E3oAlgC8fpxor2Q=
 github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azcertificates v1.4.0/go.mod h1:u560+RFVfG0CBPzkXlDW43slESbBAQjgDGi3r6z+wk8=
 github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.4.0 h1:E4MgwLBGeVB5f2MdcIVD3ELVAWpr+WD6MUe1i+tM/PA=

providers/azure/resources/azure.lr

@@ -70,6 +70,10 @@ azure.subscription @defaults ("name") {
   iot() azure.subscription.iotService
   // Cache resources in the subscription
   cache() azure.subscription.cacheService
+  // Data Factory resources in the subscription
+  dataFactory() azure.subscription.dataFactoryService
+  // Synapse Analytics resources in the subscription
+  synapse() azure.subscription.synapseService
 }
 
 // Azure function
@@ -3732,3 +3736,83 @@ private azure.subscription.cacheService.redisInstance.privateEndpointConnection
   // Provisioning state. Possible values: "Succeeded", "Creating", "Deleting", "Failed", "Updating"
   provisioningState string
 }
+
+// Azure Data Factory service
+private azure.subscription.dataFactoryService {
+  // Subscription identifier
+  subscriptionId string
+  // List of Data Factory instances
+  factories() []azure.subscription.dataFactoryService.factory
+}
+
+// Azure Data Factory instance
+azure.subscription.dataFactoryService.factory @defaults("name location") {
+  // Full resource ID
+  id string
+  // Name of the factory
+  name string
+  // Location of the factory
+  location string
+  // Tags for the factory
+  tags map[string]string
+  // Resource type
+  type string
+  // Raw properties
+  properties dict
+  // Whether public network access is enabled ("Enabled" or "Disabled")
+  publicNetworkAccess string
+  // Identity configuration
+  identity dict
+  // Provisioning state
+  provisioningState string
+  // Version of the factory
+  version string
+  // Repository configuration for source control
+  repoConfiguration dict
+  // Encryption configuration
+  encryption dict
+  // Time the factory was created
+  created time
+}
+
+// Azure Synapse Analytics service
+private azure.subscription.synapseService {
+  // Subscription identifier
+  subscriptionId string
+  // List of Synapse workspaces
+  workspaces() []azure.subscription.synapseService.workspace
+}
+
+// Azure Synapse Analytics workspace
+azure.subscription.synapseService.workspace @defaults("name location") {
+  // Full resource ID
+  id string
+  // Name of the workspace
+  name string
+  // Location of the workspace
+  location string
+  // Tags for the workspace
+  tags map[string]string
+  // Resource type
+  type string
+  // Raw properties
+  properties dict
+  // Identity configuration
+  identity dict
+  // Whether managed virtual network is enabled (set to "default" when enabled)
+  managedVirtualNetwork string
+  // Public network access setting ("Enabled" or "Disabled")
+  publicNetworkAccess string
+  // Encryption configuration
+  encryption dict
+  // Name of the managed resource group
+  managedResourceGroupName string
+  // SQL administrator login
+  sqlAdministratorLogin string
+  // Provisioning state
+  provisioningState string
+  // Whether trusted service bypass is enabled
+  trustedServiceBypassEnabled bool
+  // Whether Azure AD-only authentication is enabled
+  azureADOnlyAuthentication bool
+}