Skip to content

Commit

Permalink
Updates
Browse files Browse the repository at this point in the history
  • Loading branch information
rajlearner17 committed Dec 19, 2024
1 parent 999e39b commit 81e0c56
Show file tree
Hide file tree
Showing 4 changed files with 16 additions and 15 deletions.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Original file line number Diff line number Diff line change
Expand Up @@ -34,20 +34,21 @@ Use the **Parent Resource** dropdown to select the **Sandbox** folder as the loc

## Step 4: Enter details

If you forgot to save all these details when completing the first guide, you can find them as follows:
If you forgot to save all these details when completing the first guide, you can find them in the Azure portal as follows:

- Subscription ID. The **Home > Subscriptions** page has your *Subscription ID*
| Parameter | Location |
|--------------------|----------------------------------------------------------------------------------------------------------|
| **Subscription ID** | The **Home > Subscriptions** page has your *Subscription ID*. |
| **Tenant ID and Client ID** | The **Home > App registrations** page has *Directory (tenant) ID* and *Application (client) ID*. |
| **Client Key** | If you forgot to save the secret's value created earlier, go to **Home > App registrations > YOUR_APP_NAME > Certificates & secrets** to create a new one. Use the *Value* (not the *Secret ID*). |

- Tenant ID and Client ID. The **Home > App registrations** page has *Directory (tenant) ID* and *Application (client) ID*.

- Client Key. If you forgot to save the value of the secret you created in the first guide, you can use **Home > App registrations > YOUR_APP_NAME > Certificates & secrets** to create a new one. Use the *Value* (not the *Secret ID*).

Select your environment (likely *Global Cloud*).
Select your environment (likely *Global Cloud*).

Select **Connect**.

<p><img alt="connect-3" src="/images/docs/guardrails/getting-started/getting-started-azure/connect-subscription/connect-3.png"/></p>


## Step 5: Observe progress

Wait for the progress bar to complete. The time this takes will depend on how many resources are in the account; it is normal for the progress bar to fluctuate in size as new types of resources are discovered.
Expand All @@ -56,21 +57,21 @@ Wait for the progress bar to complete. The time this takes will depend on how ma

## Step 6: View Controls by State

Select **Reports** from the top navigation menu. Type `controls` into the **Search reports…** field to show only reports with the word "controls" in their name. Select the **Controls by State** report from the list.
Select **Reports** from the top navigation menu. Type `controls` into the **Search reports…** field to show only reports with the word "controls" in their name. Select the **Controls by State** report from the list.

<p><img alt="search-for-controls-reports" src="/images/docs/guardrails/getting-started/getting-started-aws/connect-an-account/search-for-controls-reports.png"/></p>

## Step 7: Configure report filters

From the filter bar, expand the **Type** dropdown. Then select the checkbox next to **Azure** to limit the report to only show Azure controls.
Bookmark the **Controls by State** report, you’ll need it in subsequent guides.

Bookmark the **Controls by State** report, you’ll need it in subsequent guides.

<p><img alt="filter-1" src="/images/docs/guardrails/getting-started/getting-started-azure/connect-subscription/filter-1.png"/></p>

## Step 8: View the report

Review the status of your controls for Azure. `Alarm`, `OK`, `Skipped`, and `TBD` are all common and normal states to see in your subscription. If you see controls in `Error` or `Invalid` states, those must be cleared before moving further into these guides.
Review the status of your controls for Azure. `Alarm`, `OK`, `Skipped`, and `TBD` are all common and normal states to see in your subscription. If you see controls in `Error` or `Invalid` states, those must be cleared before moving further into these guides.

<p><img alt="filter-2" src="/images/docs/guardrails/getting-started/getting-started-azure/connect-subscription/filter-2.png"/></p>

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ Navigate back to the **Controls by State** report (or use your saved bookmark),

## Step 2: Filter on controls for TLS version

Your test storage account is in the `Alarm` (red) state: out of policy. Others, if created with the default TLS setting, are in the `OK` (green) state: in policy.
Your test storage account is in the `Alarm` (red) state out of policy. Others, if created with the default TLS setting, are in the `OK` (green) state: in policy.

<p><img alt="filter-2" src="/images/docs/guardrails/getting-started/getting-started-azure/review-subscription-wide/filter-2.png"/></p>

Expand All @@ -42,7 +42,7 @@ As you create the storage accounts, Guardrails detects them and evaluates their

<p><img alt="new-in-alarm" src="/images/docs/guardrails/getting-started/getting-started-azure/review-subscription-wide/storage-accounts-in-alarm.png"/></p>

The new storage accounts are in the `Alarm` state because, as with the first one, you downgraded TLS to 1.0. The current policy requires all storage accounts to have a minumum version of 1.2.
The new storage accounts are in the `Alarm` state because, as with the first one, you downgraded TLS to 1.0. The current policy requires all storage accounts to have a minimum version of 1.2.

## Step 5: Review

Expand All @@ -51,9 +51,9 @@ In this guide you created new Azure storage accounts and observed how the Policy

## Next Steps

In the [next guide](/guardrails/docs/getting-started/getting-started-azure/create-static-exception) we’ll learn how to create an exception so that a storage account can be exempt from the access control requirement.
In the [next guide](/guardrails/docs/getting-started/getting-started-azure/create-static-exception) we’ll learn how to create an exception so that a storage account can be exempt from the access control requirement.



# Review Subscription-Wide Governance


Expand Down
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.

0 comments on commit 81e0c56

Please sign in to comment.