✨ Add Azure Data Factory and Synapse Analytics resources (#7062)

Add azure.subscription.dataFactoryService with factory resource exposing
publicNetworkAccess, encryption, identity, and repo configuration.
Add azure.subscription.synapseService with workspace resource exposing
managedVirtualNetwork, publicNetworkAccess, encryption, and auth settings.
Bump Azure provider to 13.3.0.

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: tas50

providers/azure/config/config.go

@@ -14,7 +14,7 @@ import (
 var Config = plugin.Provider{
 	Name:    "azure",
 	ID:      "go.mondoo.com/cnquery/v9/providers/azure",
-	Version: "13.2.0",
+	Version: "13.3.0",
 	ConnectionTypes: []string{
 		provider.ConnectionType,
 		string(azureinstancesnapshot.SnapshotConnectionType),

providers/azure/go.mod

@@ -17,6 +17,7 @@ require (
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/cosmos/armcosmos/v3 v3.4.0
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/cosmosforpostgresql/armcosmosforpostgresql v1.1.0
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/databricks/armdatabricks v1.1.0
+	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/datafactory/armdatafactory/v9 v9.1.0
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/iothub/armiothub v1.3.0
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault/v2 v2.0.2
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor v0.11.0
@@ -32,6 +33,7 @@ require (
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/security/armsecurity v0.14.0
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/sql/armsql v1.2.0
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage/v3 v3.0.0
+	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/synapse/armsynapse v0.8.0
 	github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azcertificates v1.4.0
 	github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.4.0
 	github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets v1.4.0

providers/azure/go.sum

@@ -108,6 +108,8 @@ github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/cosmosforpostgresql/armcos
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/cosmosforpostgresql/armcosmosforpostgresql v1.1.0/go.mod h1:s//ycXE53yRslaDdkNrCEANgvrdSOaUuqcBCJg5VEX0=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/databricks/armdatabricks v1.1.0 h1:rQyNHB/4ntzvm5F9WAiaAl7jWII+jaI4rL6sSWxTNeM=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/databricks/armdatabricks v1.1.0/go.mod h1:4jtknLqzaPtwIz8Y9NBp2rXxeA7BbSICWBD0FDzG2VM=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/datafactory/armdatafactory/v9 v9.1.0 h1:82oTC4oB/7AjVmPR8KMvlyHZgZ8PGdboh8c0Jol/XWY=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/datafactory/armdatafactory/v9 v9.1.0/go.mod h1:nuDWiSqiFv4Bo8LX99dl+Ecl9o1iNSLJDBsrl8iRWr4=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v2 v2.0.0 h1:PTFGRSlMKCQelWwxUyYVEUqseBJVemLyqWJjvMyt0do=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v2 v2.0.0/go.mod h1:LRr2FzBTQlONPPa5HREE5+RjSCTXl7BwOvYOaWTqCaI=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal/v3 v3.1.1 h1:1kpY4qe+BGAH2ykv4baVSqyx+AY5VjXeJ15SldlU6hs=
@@ -146,6 +148,8 @@ github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/sql/armsql v1.2.0 h1:S087d
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/sql/armsql v1.2.0/go.mod h1:B4cEyXrWBmbfMDAPnpJ1di7MAt5DKP57jPEObAvZChg=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage/v3 v3.0.0 h1:tqGq5xt/rNU57Eb52rf6bvrNWoKPSwLDVUQrJnF4C5U=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage/v3 v3.0.0/go.mod h1:HfDdtu9K0iFBSMMxFsHJPkAAxFWd2IUOW8HU8kEdF3Y=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/synapse/armsynapse v0.8.0 h1:IKCilT2DdxjeCXhiCIZb5hywpA1KDGKwpdA1WL20wT0=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/synapse/armsynapse v0.8.0/go.mod h1:IzuvA34YNVnlifc1+KhCouAKEf1VYzV439FOpyfTHzA=
 github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azcertificates v1.4.0 h1:mtvR5ZXH5Ew6PSONd5lO5OXovWP1E3oAlgC8fpxor2Q=
 github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azcertificates v1.4.0/go.mod h1:u560+RFVfG0CBPzkXlDW43slESbBAQjgDGi3r6z+wk8=
 github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.4.0 h1:E4MgwLBGeVB5f2MdcIVD3ELVAWpr+WD6MUe1i+tM/PA=

providers/azure/resources/azure.lr

@@ -70,6 +70,10 @@ azure.subscription @defaults ("name") {
   iot() azure.subscription.iotService
   // Cache resources in the subscription
   cache() azure.subscription.cacheService
+  // Data Factory resources in the subscription
+  dataFactory() azure.subscription.dataFactoryService
+  // Synapse Analytics resources in the subscription
+  synapse() azure.subscription.synapseService
 }
 
 // Azure function
@@ -3732,3 +3736,83 @@ private azure.subscription.cacheService.redisInstance.privateEndpointConnection
   // Provisioning state. Possible values: "Succeeded", "Creating", "Deleting", "Failed", "Updating"
   provisioningState string
 }
+
+// Azure Data Factory service
+private azure.subscription.dataFactoryService {
+  // Subscription identifier
+  subscriptionId string
+  // List of Data Factory instances
+  factories() []azure.subscription.dataFactoryService.factory
+}
+
+// Azure Data Factory instance
+azure.subscription.dataFactoryService.factory @defaults("name location") {
+  // Full resource ID
+  id string
+  // Name of the factory
+  name string
+  // Location of the factory
+  location string
+  // Tags for the factory
+  tags map[string]string
+  // Resource type
+  type string
+  // Raw properties
+  properties dict
+  // Whether public network access is enabled ("Enabled" or "Disabled")
+  publicNetworkAccess string
+  // Identity configuration
+  identity dict
+  // Provisioning state
+  provisioningState string
+  // Version of the factory
+  version string
+  // Repository configuration for source control
+  repoConfiguration dict
+  // Encryption configuration
+  encryption dict
+  // Time the factory was created
+  created time
+}
+
+// Azure Synapse Analytics service
+private azure.subscription.synapseService {
+  // Subscription identifier
+  subscriptionId string
+  // List of Synapse workspaces
+  workspaces() []azure.subscription.synapseService.workspace
+}
+
+// Azure Synapse Analytics workspace
+azure.subscription.synapseService.workspace @defaults("name location") {
+  // Full resource ID
+  id string
+  // Name of the workspace
+  name string
+  // Location of the workspace
+  location string
+  // Tags for the workspace
+  tags map[string]string
+  // Resource type
+  type string
+  // Raw properties
+  properties dict
+  // Identity configuration
+  identity dict
+  // Whether managed virtual network is enabled (set to "default" when enabled)
+  managedVirtualNetwork string
+  // Public network access setting ("Enabled" or "Disabled")
+  publicNetworkAccess string
+  // Encryption configuration
+  encryption dict
+  // Name of the managed resource group
+  managedResourceGroupName string
+  // SQL administrator login
+  sqlAdministratorLogin string
+  // Provisioning state
+  provisioningState string
+  // Whether trusted service bypass is enabled
+  trustedServiceBypassEnabled bool
+  // Whether Azure AD-only authentication is enabled
+  azureADOnlyAuthentication bool
+}