Onboard an Azure account using the CloudGuard Dome9 API

This note describes how to onboard an Azure account to CloudGuard Dome9 using the CloudGuard Dome9 REST API. It will use the AzureCloudAccount resource.

You can onboard the account to CloudGuard Dome9 in Read-Only or Manage mode. In this example, we will onboard it in Manage mode. See Operational modes for Azure subscriptions.

Prerequisites

CloudGuard Dome9 information

• the API Key and secret for your CloudGuard Dome9 account (see Create an API Key)

Azure information

• Application ID
• Application Key

These are obtained from the Azure management portal, in the App Registration page.

Request

POST /v2/AzureCloudAccount

{
  "id": "********-****-****-****-************",
  "name": "Azure-account",
  "subscriptionId": "*******",
  "tenantId": "string",
  "credentials": {
    "clientId": "******",
    "clientPassword": "******"
  },
  "operationMode": "Manage",
  "error": "string",
  "creationDate": "2018-10-16T12:29:10Z"
}

Response

200 OK. There is no information in the response.

See also

AzureCloudAccount (CloudGuard Dome9 API)

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.