Enabling CWPP for existing Azure Subscriptions

This guide will help you enable CWPP for existing Azure subscription integration. To learn more about Azure CWPP architecture, see Azure CWPP Architecture.

Prerequisites

  • You have the following permissions:

    Role NameScopeDescription
    OwnerSubscriptionCreate resource group, managed identity, and assign roles to enable CWPP

  • Prerequisites for Azure CWPP

Steps

  1. Navigate to Settings - Integrations. Filter by Inbound integrations and select Microsoft Azure Subscription.
💡

Note: The process to update an existing Azure subscription is the same as adding a new Azure subscription.

Tenant Settings

  1. Select the Azure Active Directory from the drop-down.

Tenant Settings

  1. Select the default region where you want to create the dedicated resource group required for CWPP. Learn more about the resources created during CWPP Onboarding.

Tenant Settings

💡

Note: In case you want to select a different region for a subscription, you can change the region in the region drop-down, re-run the script and select the specific subscription.

  1. Download the script and run it in a command line interface (CLI). You can also run the script in Azure Cloud Shell (opens in a new tab). Learn more about Azure Cloud Shell (opens in a new tab).
bash ms-azure-install-plerion.sh

This will show the following output:

CLI Output

💡

Note: The listed subscriptions are the ones that are available to the user. Use the number associated with the subscription to select the subscription in subsequent steps or press 'y' to install on all subscriptions.

  1. Optionally skip the CSPM roles setup by pressing 's'. You can, however, re-install the CSPM roles by running pressing 'y' and running the steps.

  2. Optionally skip the optional CSPM roles setup by pressing 's'. You can, however, re-install the optional CSPM roles by pressing 'y' and running the steps. CLI Output

  3. Install the CWPP roles by pressing 'y' to install CWPP on all subscriptions or the number associated with the subscription (shown in step 4) to install CWPP on a specific subscription. CLI Output

  4. Return to Plerion App and click on 'Verify access'. This will then display all subscriptions added based on the permissions provided. CLI Output

  5. Select 'Save subscriptions'. The Azure subscriptions will be updated with CWPP capability.

Troubleshooting

Refer to the Troubleshooting Onboarding Errors for Azure Subscription guide for more information.

Editing CWPP ConfigurationMicrosoft Azure Active Directory