AWS securityhub documentation change
Summary
Added troubleshooting section for 'Unable to record some Azure resources' with reasons and resolution steps
Security assessment
The change adds diagnostic steps for Azure resource recording failures in Security Hub integration. While Security Hub is a security service, this specific change addresses operational setup issues without mentioning vulnerabilities, exploits, or security incidents.
Diff
diff --git a/securityhub/latest/userguide/securityhub-v2-azure-setup-securityhub-v2.md b/securityhub/latest/userguide/securityhub-v2-azure-setup-securityhub-v2.md index 81fe22678..936e22c8e 100644 --- a//securityhub/latest/userguide/securityhub-v2-azure-setup-securityhub-v2.md +++ b//securityhub/latest/userguide/securityhub-v2-azure-setup-securityhub-v2.md @@ -472,0 +473,27 @@ To address this issue, verify that the connector is enabled and that the service +Unable to record some Azure resources + + +The error can occur for any of the following reasons: + + * The Azure environment does not meet the prerequisites for resource recording. + + * The app registration does not have admin consent for Microsoft Graph API permissions. + + * The Reader role assignment does not cover all required scopes. + + * The Microsoft Entra ID tenant does not have required log data. + + + + +To address the error, do the following: + + 1. To confirm that your environment meets all requirements, review [Prerequisites for Microsoft Azure](./securityhub-v2-azure-prereqs.html#securityhub-v2-azure-prereqs-azure). + + 2. Confirm that the app registration has the required Microsoft Graph API permissions with admin consent. + + 3. Verify that the service principal has the Reader role at the tenant root management group scope. + + + +