AWS inspector documentation change
Summary
Added troubleshooting guidance for Azure resource recording failures
Security assessment
Documented solutions for security monitoring failures related to permissions and log availability. Helps ensure proper security visibility but doesn't address a specific vulnerability.
Diff
diff --git a/inspector/latest/user/inspector-azure-setup-inspector.md b/inspector/latest/user/inspector-azure-setup-inspector.md index 063d6b6bb..02023b38f 100644 --- a//inspector/latest/user/inspector-azure-setup-inspector.md +++ b//inspector/latest/user/inspector-azure-setup-inspector.md @@ -438,0 +439,27 @@ Verify that the Azure app registration has the correct federated identity creden +Unable to record some Azure resources + + +The error can occur for any of the following reasons: + + * The Azure environment does not meet the prerequisites for resource recording. + + * The app registration does not have admin consent for Microsoft Graph API permissions. + + * The Reader role assignment does not cover all required scopes. + + * The Microsoft Entra ID tenant does not have required log data. + + + + +To address the error, do the following: + + 1. To confirm that your environment meets all requirements, review [Prerequisites for integrating Amazon Inspector with Microsoft Azure](./inspector-azure-prereqs.html). + + 2. Confirm that the app registration has the required Microsoft Graph API permissions with admin consent. + + 3. Verify that the service principal has the Reader role at the tenant root management group scope. + + + +