AWS securityhub documentation change
Summary
Added troubleshooting section for Azure resource recording failures
Security assessment
Documents resolution steps for security monitoring gaps (e.g., missing logs/permissions). Addresses potential security visibility issues but not a specific vulnerability.
Diff
diff --git a/securityhub/latest/userguide/securityhub-azure-setup-securityhub.md b/securityhub/latest/userguide/securityhub-azure-setup-securityhub.md index 473a51d1d..4d8bbbe9f 100644 --- a//securityhub/latest/userguide/securityhub-azure-setup-securityhub.md +++ b//securityhub/latest/userguide/securityhub-azure-setup-securityhub.md @@ -189,0 +190,27 @@ To address this issue, verify that the Event Hub namespace is tagged correctly ( +Unable to record some Azure resources + + +The error can occur for any of the following reasons: + + * The Azure environment does not meet the prerequisites for resource recording. + + * The app registration does not have admin consent for Microsoft Graph API permissions. + + * The Reader role assignment does not cover all required scopes. + + * The Microsoft Entra ID tenant does not have required log data. + + + + +To address the error, do the following: + + 1. To confirm that your environment meets all requirements, review [Prerequisites for Microsoft Azure](./securityhub-azure-prereqs.html#securityhub-azure-prereqs-azure). + + 2. Confirm that the app registration has the required Microsoft Graph API permissions with admin consent. + + 3. Verify that the service principal has the Reader role at the tenant root management group scope. + + + +