ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-11-08 20:33:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(azure): add Deploy-to-Azure Bicep template and certificate auth

Browse Source
This commit is contained in:
Lydia Vilchez committed 2026-08-12 09:48:34 +02:00
1 parent 2eff97c2cc
commit 3be989c5b1
7 files changed
+53 -32
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

docs/user-guide/providers/azure/authentication.mdx
+2 -2
View File
@@ -294,9 +294,9 @@ Alternatively, point Prowler at a certificate file on disk:
prowler azure --certificate-auth --certificate-path /path/to/prowler.key
```
## Service Principal Application Authentication (Recommended)
## Service Principal Application Authentication
This method is required for Prowler Cloud and recommended for Prowler CLI.
This client-secret flow is the supported fallback when [Certificate Authentication](#certificate-authentication) is not an option — for example on sovereign clouds where the Deploy to Azure quick-start is unavailable, or when an organisation policy forbids certificate-based service principals. New Prowler Cloud onboardings should prefer certificate authentication.
### Creating the Service Principal
For more information, see [Creating Prowler Service Principal](/user-guide/providers/azure/create-prowler-service-principal).
docs/user-guide/providers/azure/getting-started-azure.mdx
+1 -1
View File
@@ -57,7 +57,7 @@ Azure supports two authentication methods in the add-provider wizard. Prowler Cl
#### Certificate Authentication (Recommended)
The one-click flow: click **Deploy to Azure** in the wizard and let the Bicep template create the App Registration / Service Principal, the `Reader` role assignment, and the custom `ProwlerRole` with a certificate credential in a single deployment.
The quick-start flow: click **Deploy to Azure** in the wizard to start a deployment in the Azure Portal with the Prowler Bicep template pre-loaded. The template creates the App Registration / Service Principal, the `Reader` role assignment, and the custom `ProwlerRole` bound to a certificate credential. You still fill the certificate parameter and confirm the deployment inside the Portal.
1. In the Azure wizard, select **Certificate Authentication (Recommended)**.
2. Click the **Deploy to Azure** button. This opens the Azure Portal deployment blade pre-loaded with the [Prowler Bicep template](https://github.com/prowler-cloud/prowler/blob/master/permissions/templates/azure/bicep/prowler-scan.bicep).