Microsoft Azure Configuration – Subscriptions
Creating Azure subscriptions is a two-step process:
- configure your Azure subscription in Azure
- set up your Azure subscription in CloudCheckr
Configure Your Azure Subscription in the Azure Portal
- Log into the Azure management portal.
- From the selected Azure portal, select the directory that contains the subscription you want to scan.
- Open the Azure Active Directory management panel.
- Select Properties.
- Find the Directory ID and save it.
- Select App Registrations and click Add to create a new app registration.
- Type a name for the application. (For example: CloudCheckr Service).
- From the Application Type drop-down menu, select Web app /API .
- In the Sign-on URL text field, type https://localhost.
- Click Create. When you are back on the App Registration screen, find the Application ID and save it.
- Select the new registration and from the menu, select Keys.
- Type a name, select a duration, and click Save. Azure creates a new key and displays the key value in the third text field.
- Save the new key value immediately since you will not be able to view it again. You will now have three values: Directory ID, Application ID, and the secret key.
- Open the Subscription management panel.
- Select the subscription that CloudCheckr will monitor. Find the subscription ID and save it.
- With the subscription selected from the subscription management panel, select Access Control (IAM).
- Click Add to add the new service account.
- Select the Reader role and then add the new service account as the user. You may need to search for the account if it is not listed.
- Save the change. The CloudCheckr service account should now be on the list with reader access.
Configure Your Subscription Account in CloudCheckr
To import your Azure data into CloudCheckr, you need to create Azure accounts in CloudCheckr.
- From the top right of the Partners page, click the NEW ACCOUNT button.
The New Account screen displays.
- Type a name for your account. If needed, you can change the name later.
- From the Cloud Provider drop-down menu, select Microsoft Azure.
- Click Create. The Configure Account page opens.
- Click the drop-down arrow and select Collect resource information from my Azure subscription from the drop-down menu. The Configuration page displays the subscription instructions.
- Provide the required information from the Azure portal.
- Directory ID
- Application ID
- Subscription ID
- Secret Key
- From the Azure Account Type drop-down menu, select Commercial or Government.
- Click Update.