Skip to content

Commit

Permalink
Simplify Azure integration docs per new UI (#459)
Browse files Browse the repository at this point in the history
* Simplify Azure integration docs per new UI

* fixes

* fixes

* fill in instructions based on Figma

* Add screenshots and stuff I learned actually using it

* spelling

* add images

* fix link

* changes per @afiune

* new spaces page with critical counts

* changes per @afiune chat

* remove app perm

* put app perm back in, doh

* troubleshoot and tweak

* fix image
  • Loading branch information
misterpantz authored Nov 26, 2024
1 parent aac6331 commit 4626919
Show file tree
Hide file tree
Showing 15 changed files with 83 additions and 327 deletions.
2 changes: 1 addition & 1 deletion docs/cnspec/supplychain/registry/azure_acr.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
---
title: Azure Container Registry (ACR)
title: Assess Risk in the Azure Container Registry (ACR)
sidebar_label: Azure Container Registry (ACR)
sidebar_position: 3
displayed_sidebar: cnspec
Expand Down
2 changes: 1 addition & 1 deletion docs/platform/infra/cloud/azure/_include-keyvault.mdx
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
If you use key vault access policy, this step is required.
If you use legacy access policy permission model for key vaults, this step is required.

A key vault access policy determines whether a given security principal (a user, application or user group) can perform different operations on key vault secrets, keys, and certificates.

Expand Down
369 changes: 57 additions & 312 deletions docs/platform/infra/cloud/azure/azure-integration-scan-subscription.mdx

Large diffs are not rendered by default.

24 changes: 15 additions & 9 deletions docs/platform/infra/cloud/azure/manual-reg-path.mdx
Original file line number Diff line number Diff line change
@@ -1,24 +1,28 @@
---
title: Manual Setup - Azure Continuous Scanning
sidebar_label: Manual Setup - Azure Continuous Scanning
sidebar_position: 5
title: Manually Set Up Azure Continuous Scanning
sidebar_label: Manually Set Up Continuous Scanning
sidebar_position: 50
description: Take the manual approach to configuring the Mondoo Azure Integration to scan Azure resources.
image: /img/featured_img/mondoo-azure.jpg
---

Mondoo integration with Azure requires that you register and grant permissions to an Azure app. Follow this "manual" approach to app registration and configuration if:
## Are you sure you want to set up Azure manually?

- You want to use your own certificates for authentication
Mondoo offers two approaches to setting up an integration for continuous Azure scanning: automated and manual.

- You use the [key vault access policy](https://learn.microsoft.com/en-us/azure/key-vault/general/rbac-access-policy) permission model for your key vaults
Follow the **manual setup** described below only in these rare cases:

- Your unique Azure infrastructure doesn't support Microsoft's "automatic" app registration method
- You want to integrate Mondoo with all subscriptions in a management group

- You followed the steps in [Continuously Scan an Azure Management Group](/platform/infra/cloud/azure/azure-integration-scan-group/) or [Continuously Scan an Azure Subscription](/platform/infra/cloud/azure/azure-integration-scan-subscription/) and didn't successfully integrate Mondoo with Azure.
- You use the [legacy access policy permission model](https://learn.microsoft.com/en-us/azure/key-vault/general/rbac-access-policy) for your key vaults (instead of RBAC)

- Your Azure environment is unusually large

All other users can follow the [**automatic Azure integration setup**](/platform/infra/cloud/azure/azure-integration-scan-subscription), which takes a fraction of the time.

## Prerequisites

Before you integrate Microsoft Azure with Mondoo, be sure you have:
Before you manually integrate Microsoft Azure with Mondoo, be sure you have:

- A Mondoo account with Editor or Owner permissions for the space in which you want to add the integration.

Expand Down Expand Up @@ -289,4 +293,6 @@ If your integration is unsuccessful, read [Troubleshoot an Azure Configuration](

- [Learn more about Mondoo](/platform/start/plat-what-is/)

- [Test or troubleshoot an Azure integration](/platform/infra/cloud/azure/troubleshoot/)

- [Integrate Mondoo with other cloud platforms in your infrastructure](/platform/infra/cloud/overview/)
2 changes: 1 addition & 1 deletion docs/platform/infra/cloud/azure/overview.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ With the API-driven Mondoo Azure integration, you deploy the integration once an

## Scan during build time

- [Risk assessment for Azure Container Registry](/cnspec/supplychain/registry/azure_acr.md)
- [Assess Risk in the Azure Container Registry](/cnspec/supplychain/registry/azure_acr.md)

- [Build VM Images with Packer](/cnspec/supplychain/packer.md)

Expand Down
6 changes: 3 additions & 3 deletions docs/platform/infra/cloud/azure/troubleshoot.mdx
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: Test or troubleshoot an Azure Integration
sidebar_label: Troubleshoot Azure
sidebar_position: 4
title: Test or Troubleshoot an Azure Integration
sidebar_label: Test or Troubleshoot
sidebar_position: 100
description: Troubleshoot integrations between Mondoo and Microsoft Azure.
image: /img/featured_img/mondoo-azure.jpg
---
Expand Down
5 changes: 5 additions & 0 deletions docusaurus.config.js
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,11 @@ const { themes } = require("prism-react-renderer");
const legacyRedirects = [
// NOTE: Path / is equivalent to https://mondoo.com/docs/
//
// From Azure simplification November 2024
{
from: "/platform/infra/cloud/azure/azure-integration-scan-group",
to: "/platform/infra/cloud/azure/manual-reg-path",
},
//// July 2024 moved Jira/Cases content to its own high-level section, where it'll grow
{
from: "/platform/maintain/jira",
Expand Down
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified static/img/platform/security/spaces.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.

0 comments on commit 4626919

Please sign in to comment.