Skip to content

[Cloud Security Posture] Support Azure cloud connector - #15255

Merged
amirbenun merged 8 commits into
elastic:mainfrom
amirbenun:cspm-azure-cloud-connector
Sep 10, 2025
Merged

[Cloud Security Posture] Support Azure cloud connector#15255
amirbenun merged 8 commits into
elastic:mainfrom
amirbenun:cspm-azure-cloud-connector

Conversation

@amirbenun

@amirbenun amirbenun commented Sep 9, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

Proposed commit message

Cloud Security Posture: Azure

  • Add ARM template link
  • Add support for a new credentials type cloud_connectors_federated_identity.
    This method expects:
    ClientID
    TenantID

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Author's Checklist

  • [ ]

How to test this PR locally

Related issues

Screenshots
@amirbenun
amirbenun requested a review from a team as a code owner September 9, 2025 15:40
@amirbenun amirbenun added the enhancement New feature or request label Sep 9, 2025
@andrewkroh andrewkroh added Integration:cloud_security_posture Security Posture Management Team:Cloud Security Cloud Security team [elastic/cloud-security-posture] labels Sep 9, 2025
Omolola-Akinleye
Omolola-Akinleye suggested changes Sep 9, 2025
View reviewed changes
Comment thread packages/cloud_security_posture/data_stream/findings/manifest.yml Outdated
- name: azure.account_type
value: single-account
- name: azure.credentials.type
value: cloud_connectors_federated_identity

@Omolola-Akinleye Omolola-Akinleye Sep 9, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@amirbenun I just noticed this. Can we change this value cloud_connectors similar to aws.credentials_type? This will help us on Kibana side with consistent value cloud_connector to check. We have generic component for Credentials type so we want to avoid specific values by cloud provider. I think we need to make the same change in Asset Inventory side too.

@seanrathier seanrathier Sep 9, 2025

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In my comment, I mentioned I updated my open PR with the credential type value we want for cloud-connectors
seanrathier
seanrathier requested changes Sep 9, 2025
View reviewed changes

@seanrathier seanrathier left a comment •
edited
Loading

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have updated a PR I had with the changes I requested in the comment
Comment thread packages/cloud_security_posture/data_stream/findings/manifest.yml Outdated
- name: azure.account_type
value: single-account
- name: azure.credentials.type
value: cloud_connectors_federated_identity

@seanrathier seanrathier Sep 9, 2025

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We are going to need to change cloud_connectors_federated_identity to cloud-connectors here and the other merged PR.
@amirbenun amirbenun mentioned this pull request Sep 10, 2025
Merged
5 tasks
@amirbenun

amirbenun commented Sep 10, 2025

Copy link
Copy Markdown
Contributor Author

Sounds good @Omolola-Akinleye @seanrathier
I updated this PR and opened another PR to Cloud Asset Inventory - #15264.
@Omolola-Akinleye
Omolola-Akinleye self-requested a review September 10, 2025 13:12
@Omolola-Akinleye

Omolola-Akinleye commented Sep 10, 2025

Copy link
Copy Markdown
Contributor

LGTM! Thanks for the change
@amirbenun
amirbenun enabled auto-merge (squash) September 10, 2025 13:15
@elasticmachine

elasticmachine commented Sep 10, 2025

Copy link
Copy Markdown

💚 Build Succeeded

History
@amirbenun
amirbenun merged commit 6e6e232 into elastic:main Sep 10, 2025
7 checks passed
@elastic-sonarqube

elastic-sonarqube Bot commented Sep 10, 2025

Copy link
Copy Markdown

Quality Gate passed Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube
@elastic-vault-github-plugin-prod

elastic-vault-github-plugin-prod Bot commented Sep 10, 2025

Copy link
Copy Markdown
Contributor

Package cloud_security_posture - 3.1.0-preview01 containing this change is available at https://epr.elastic.co/package/cloud_security_posture/3.1.0-preview01/
@elastic-vault-github-plugin-prod

elastic-vault-github-plugin-prod Bot commented Sep 10, 2025

Copy link
Copy Markdown
Contributor

Package cloud_security_posture - 3.1.0-preview02 containing this change is available at https://epr.elastic.co/package/cloud_security_posture/3.1.0-preview02/
@elastic-vault-github-plugin-prod

elastic-vault-github-plugin-prod Bot commented Oct 19, 2025

Copy link
Copy Markdown
Contributor

Package cloud_security_posture - 3.1.0 containing this change is available at https://epr.elastic.co/package/cloud_security_posture/3.1.0/
tehbooom pushed a commit to tehbooom/integrations that referenced this pull request Nov 19, 2025
@amirbenun
[Cloud Security Posture] Support Azure cloud connector (elastic#15255)
462ebc3
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request Integration:cloud_security_posture Security Posture Management Team:Cloud Security Cloud Security team [elastic/cloud-security-posture]

5 participants

@amirbenun @Omolola-Akinleye @elasticmachine @seanrathier @andrewkroh