AzureAzure

Azure

Connect your Microsoft Azure subscription to RAD Security for comprehensive cloud security monitoring.

Overview

Connect your Azure subscription(s) to RAD Security to scan cloud resources for misconfigurations and security issues. You can use our official Terraform module (recommended) or configure the integration manually via the Azure Portal.

Connection setup

We publish a Terraform module in the Terraform Registry that provisions all of the resources needed to connect your Azure account to RAD Security.

  1. Sign in to RAD Security
  2. Go to Data Sources
  3. Click on Add provider
  4. Follow the guide for Azure

Take the access_key_id and secret_key values from the RAD Security provider and replace them in the snippet below. Then, configure the azurerm and azuread providers.

terraform {
  required_providers {
    rad-security = {
      source  = "rad-security/rad-security"
      version = "..."
    }
    azurerm = {
      source  = "hashicorp/azurerm"
      version = ">=3.0.0"
    }
    azuread = {
      source  = "hashicorp/azuread"
      version = ">= 1.0"
    }
  }
}

provider "azuread" {}

provider "azurerm" {}

provider "rad-security" {
  access_key_id        = "..."
  secret_key           = "..."
  rad_security_api_url = "https://api.rad.security"
}

module "rad-security-connect" {
  source  = "rad-security/rad-security-connect/azurerm"
  version = "..."
}

Existing Service Principal

The module is not needed if an existing Service Principal is used. The Service Principal needs to have the necessary permissions required to be able to function properly within RAD. These permissions RAD uses can be found within the role definition within the module. This can change over time as new versions of the module get released over time. A new rad-security_azure_register resource needs to be created for each Azure Subscription you wish to connect with RAD.

More information can be found within the Provider docs here.

Multiple Azure Subscriptions

Multiple Azure subscriptions can be added with the azure_subscriptions input variable in the rad-security-connect module. The input variable is a list of strings. The strings passed to the list need to be in the form /subscriptions/00000000-0000-0000-0000-000000000000.

Was this page helpful?