ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-14 15:34:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(azure): add Deploy-to-Azure Bicep template and certificate auth

Browse Source
This commit is contained in:
Lydia Vilchez committed 2026-08-12 09:48:34 +02:00
1 parent a47d94954a
commit 2eff97c2cc
4 files changed
+8 -12
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

docs/user-guide/providers/azure/authentication.mdx
+1 -1
View File
@@ -220,7 +220,7 @@ The following security checks require the `ProwlerRole` permissions for executio
## Deploy to Azure (Quick-Start)
Prowler ships a public [Bicep template](https://github.com/prowler-cloud/prowler/blob/master/permissions/templates/azure/bicep/prowler-scan.bicep) that provisions the App Registration, Service Principal, built-in `Reader` role assignment, and the custom `ProwlerRole` — all bound to an X.509 certificate credential — in a single deployment. This is the Azure analogue of the AWS CloudFormation quick-create flow.
Prowler ships a public [Bicep template](https://github.com/prowler-cloud/prowler/blob/master/permissions/templates/azure/bicep/prowler-scan.bicep) that provisions the App Registration / Service Principal, the built-in `Reader` role assignment, and the custom `ProwlerRole` — all bound to an X.509 certificate credential — in a single deployment. This is the Azure analogue of the AWS CloudFormation quick-create flow.
Use it from the Prowler Cloud **add-provider wizard**:
docs/user-guide/providers/azure/getting-started-azure.mdx
+1 -1
View File
@@ -57,7 +57,7 @@ Azure supports two authentication methods in the add-provider wizard. Prowler Cl
#### Certificate Authentication (Recommended)
The one-click flow: click **Deploy to Azure** in the wizard and let the Bicep template create the App Registration, Service Principal, `Reader` role assignment, and custom `ProwlerRole` with a certificate credential in a single deployment.
The one-click flow: click **Deploy to Azure** in the wizard and let the Bicep template create the App Registration / Service Principal, the `Reader` role assignment, and the custom `ProwlerRole` with a certificate credential in a single deployment.
1. In the Azure wizard, select **Certificate Authentication (Recommended)**.
2. Click the **Deploy to Azure** button. This opens the Azure Portal deployment blade pre-loaded with the [Prowler Bicep template](https://github.com/prowler-cloud/prowler/blob/master/permissions/templates/azure/bicep/prowler-scan.bicep).