This article explains how you can connect your Azure Subscription with PingSafe for detecting security vulnerabilities continuously.
Clients can now onboard their Azure Cloud Subscription on the PingSafe platform and have centralized management fo
- From the left navigation panel, click on the “Add an Account” button present under the “Cloud Security”.
- Click on the “Connect” button present under “Microsoft Azure”.
- Select “Subscription” from the “Onboard” option, fill in the “Account Name”, “Subscription ID”, and “Tenant ID”.
- Now, Select the Mode:
- Detect Mode: PingSafe has read-only access to the resources in your Azure Cloud account.
- Detect & Auto remediate: PingSafe has read/write access to the resources. You will have to enable/disable this feature for each plugin that supports auto-remediation.
- Download the “Terraform script”.
- Open the Azure Cloud Shell.
- Use command "az login" and follow the instructions to login into your Azure Cloud Shell.
- Click on the “Upload” button and select the downloaded “Terraform Script”.
- Execute the below command in the same directory where the terraform file has been uploaded and enter “Yes” when prompted.
terraform init && terraform apply
- After the terraform code is successfully executed, navigate to the “consent_link” received on the Azure Cloud Shell.
- Under “Configured permissions”, click on “Grant admin consent for Default Directory”.
- Click on the “Yes” button in “Grant admin consent confirmation”.
- Copy the “application_id” and “client_secret” from the Azure cloud shell.
- Paste the copied “application_id” and “client_secret” and click on the “Next” button.
- Select the Compliance(optional) and then click on the “Finish” button.
- Note that the Azure Tenant has been successfully onboarded.
