Configure a Subscription Account [Legacy]

On May 1, 2019, Azure rolled out changes to App registrations that will replace the Legacy version of App registrations. If you are still using the Legacy version, please follow the instructions in this topic.

To allow CloudCheckr to access the resources associated with your Azure subscription, you must create a connection between Azure and CloudCheckr.

In the Azure world, a subscription is a bundle of services and resources. Azure customers access those service and resources through the Azure Active Directory, which is Microsoft's cloud-based identity and access management tool.

To integrate your Azure subscription with CloudCheckr, you will need to perform two steps:

  • In Azure, you will access your subscription and create and register an app that will communicate with Azure Active Directory.
  • In CloudCheckr, you will apply the values associated with your Azure Active Directory account and new app to allow CloudCheckr to monitor your resources.

Configure Your Azure Subscription in the Azure Portal

After you create the Directory ID, Application ID, Subscription ID, and secret key, please copy these values to a desired file type, such as CSV, and save the file to a safe location. You will need them to configure your subscription in CloudCheckr.
  1. Log in to the Azure management portal.
    The portal link you choose depends on your subscription type:

    The Azure portal opens and displays the directory that contains the subscription you need to configure.

  2. From the left navbar, click Azure Active Directory.

    The Azure Active Directory blade opens.
  3. In the Manage section of the Active Directory blade, click Properties.

    The Properties blade opens.
  4. Click the icon to the right of the Directory ID text field and copy the ID.

  5. In the Manage section of the Azure Active Directory blade, click App registrations (Legacy).

    The App registrations (Legacy) blade opens.
  6. Click New application registration to create a new app.

    The Create blade opens.
  7. Create your application:
    1. Type a name for the application. (For example: CloudCheckr Service)
    2. From the Application Type drop-down menu, select Web app /API.
    3. In the Sign-on URL text field, type https://localhost.

    4. Click Create.

      The Registered app blade opens.

  8. Copy the Application ID.

  9. Click the Settings icon in the Registered app blade and select Keys.

    The Keys blade opens.

  10. Type a name for the key, select when you want it to expire, and click Save.

    Azure creates a new secret key.

  11. Copy the value of the secret key and save it immediately since you will not be able to view it again.

    You will now have three values: Directory ID, Application ID, and the secret key.

  12. From the left navbar, click All resources.

    The All resources blade opens.

  13. From the list, select the resource that you want CloudCheckr to monitor.

    The blade for the selected resource opens.

  14. Locate the Subscription ID and copy it.

  15. From the blade of the selected resource, click Access control (IAM).

    The Access control (IAM) blade opens.
  16. Select Add > Add Role Assignment.

    The Add role assignment blade opens.
  17. Create a role assignment:
    1. From the Role drop-down list, select Reader.
    2. In the Select text field, type the name of the application that you created.
    3. The Access control (IAM) blade lists your application with the Reader role.

Configure Your Subscription Account in CloudCheckr

  1. From the top right of the Partners page, click the NEW ACCOUNT button.

    The New Account screen displays.

  2. Type a name for your account. If needed, you can change the name later.
  3. From the Cloud Provider drop-down menu, select Microsoft Azure.

    The Configure Account page opens.

  4. Click the drop-down arrow and select Collect resource information from my Azure subscription from the drop-down menu.

    The Configuration page displays the subscription instructions.

  5. Provide the required information from the Azure portal.
    • Directory ID
    • Application ID
    • Subscription ID
    • secret key
  6. From the Azure Account Type drop-down menu, select Commercial, Government, or Germany.
  7. Click Update.

    CloudCheckr will now begin to monitor your Azure resources.

If you have a Pay-as-You-Go subscription, CloudCheckr will automatically display the Edit Billing Configuration page, but the options will be pertinent to usage and data collection. Review the Edit Billing Configuration: Pay-as-You-Go Subscriptions topic for more information.

How did we do?