Microsoft Azure - Add Tag to Cloud Instance

Microsoft Azure - Add Tag to Cloud Instance takes the saved query supplied as a trigger (or devices that have been selected in the asset table) and adds a tag to those Microsoft Azure cloud instances.

General Settings

Connection Settings

1. Azure subscription ID (required) - The Subscription ID access control role in IAM for the Axonius application, as detailed in the Required Permissions section.
2. Azure client ID (required) - The Application ID of the Axonius application, as detailed in the Required Permissions section.
3. Azure client secret (required) - A user created key for the Axonius application, as detailed in the Required Permissions section.
4. Azure tenant ID (required) - Microsoft Azure Active Directory ID, as detailed in the Required Permissions section.
5. Cloud environment (required, default: Azure Public Cloud) - Select your Azure cloud environment type.
6. Verify SSL (required, default: False) - Verify the SSL certificate offered by the value supplied in Hostname or IP Address. For more details, see SSL Trust & CA Settings.
   • If enabled, the SSL certificate offered by the selected Microsoft Azure cloud environment will be verified against the CA database inside of Axonius. If the SSL certificate can not be validated against the CA database inside of Axonius, the connection will fail with an error.
   • If disabled, the SSL certificate offered by the selected Microsoft Azure cloud environment will not be verified against the CA database inside of Axonius.
7. HTTPS Proxy (optional, default: empty) - A proxy to use when connecting to the selected Microsoft Azure cloud environment.
   • If supplied, Axonius will utilize the proxy when connecting to the selected Microsoft Azure cloud environment.
   • If not supplied, Axonius will connect directly to the selected Microsoft Azure cloud environment.

Action Settings

1. Tag name (required) - The tag name to be added to the Microsoft Azure cloud instance.
   • A tag name can have a maximum of 512 characters and is case-insensitive.
   • Tag names cannot have the following prefixes which are reserved for Azure use: 'microsoft', 'azure', 'windows'.
2. Tag value (optional, default: empty) - The tag value to be added to the Microsoft Azure cloud instance.
   • If the tag already exists on the cloud instances, its value will be overridden with the specified value.

APIs

Axonius uses the Microsoft Azure - Tags - Create Or Update API.

Required Permissions

To connect to Microsoft Azure, you need to create a designated Axonius application in the Microsoft Azure Portal and grant it read-only permissions. All required credentials will be given once an application is created. For details, see Creating an application in the Microsoft Azure Portal.

Using Add Tag to Microsoft Azure Cloud Instance action requires a role similar to "Tag Contributor" (build-in role). At the very least, read access to the relevant resources is required, along with the permission to read and write tags (microsoft.resource.tags).