Welcome. In this video, we're gonna talk about how to properly onboard Microsoft Azure into Cisco multi cloud defense. It contains a couple steps, so we want to go through a lot of the different nuances that you might see as you go through that process with us. So as you.00:05We'll notice we start off in Cisco defense Orchestrators tenant, so what we typically want to do is pivot into the Cisco multi cloud defense tenant by hitting that little blue button in the top right hand corner. Now, there's a couple ways you could enter this wizard. You could go through the wizard on this main screen or you could go here to home and then back through the setup wizard both austensibly.00:20Take you to the same place. But we're gonna connect the account. This time we're gonna click on Azure, and you'll notice there's two steps, right? Open up Azure cloudshell and bash mode is the 1st step. And to do that, it's very simple if you've never done it before, this little terminal icon in the type right hand corner of your Azure shell.00:40It by default sometimes will open up in PowerShell. This is not the 1st time I've opened it up, so it's going to load into Bash directly for me, but if you ever need to change it, there's this little button in the top left hand corner. So with that, I need to paste in the script that they gave us, so we can simply click this blue button.00:58And it says copy here, it will copy the command that we want to run within that bash shell.01:18So I'm gonna hit that. We'll pivot back over into the Azure portal and we'll paste that in. When you hit enter here, it's gonna do a couple of things, right? The 1st thing is make sure that that's the subscription that you want to onboard.01:24If it's not, you can change the context by selecting NO and then pushing in the number. Now it pay as you go actually is the one we want to use, so I'm gonna go ahead and reselect one here and then it will start to enable the different APIs that we need to interact with. And you can read through those, right? Compute, network, event grid, and marketplace to accept eulas.01:41So I will go ahead and say we're gonna create a new app registration and it will go off to the races. This is normally pretty quick. At the end I'll show you there are ways you can do all this manually if you cannot run this, this shell script for some reason, but this is a pretty fast process and at the end.01:59You'll see we'll get a big old kind of blob of JSON output. That's really not necessary for what we're doing here. We're really just gonna be concerned with like four parameters that it spits out that we're gonna paste into the wizard that we're running in the Cisco Milli Cloud defense side.02:19So we'll give this just a moment. If, if it takes too long, I'll speed it up with the magic gree magic magic gree of using video editing. There we go.02:36Didn't even have to speed it up. It is that quick. So this is the JSON kind of output of a bunch of the different events that, that we just kind of kicked off, and then again this is what we're gonna be concerned with right down here. So I'm gonna go ahead and just copy.02:54This tenant directory out of here cause we're gonna paste it back into the wizard. It's one of the 1st fields. Copy, pivot over here. We'll give this a name. We'll just call this like YouTube demo Azure or something.03:09We will paste in the directory ID and then it's kind of just back and forth, back and forth. I do recommend like storing this somewhere. If for some reason you ever need to like onboard this again or maybe you switch tenants moving from POV into production, you can reuse all of this data.03:26The one that you cannot retain, if you, if you like move off this screen, you wouldn't be able to keep it as a secret. I will show you at the end of the video where you can actually go into the app registration, we could delete this existing secret and create a new one, new, it would be all good, but.03:51From a visibility standpoint typically those secrets are only shown to you one time. So we have saved it. It will go out and try to discover the assets. It'll go through that same process that we saw.04:07With AWS, we will go ahead and click next and close. And what we'll do now is pivot into the inventory. Let's just make sure we we do see the V net. One good way I just marked it with an X If you have multiple accounts to kind of validate this and not have to filter is just to select the account you just onboarded and that'll dropdown.04:22New. There's our test vnet. I do wanna show you the app registration, which is one of the constructs we create on the Azure side as we onboard. You should see under all applications, this is the app registration that.04:42We just created and if we take a look at this, we'll go under manage and certificates and secrets. This is where I was saying you could go in and delete the existing secret, like if you lost the value for some reason.04:58With that little trash can icon on the right hand side or you could or and then you could go in and create a new one. So you could just create, you know, a new MCD key, and then whatever your expiry, you know, that you that you guys an organization want, you can select, click add and again it will show that to you one time. There.05:14There's NO way that I know about at least that you can retrieve that after the fact. But you could onboard using that secret now. So we'll go ahead and delete that. The other thing I'll show you is the roles that it creates, but this is under the subscriptions, so we'll go.05:33We'll go to my pay as you go subscription here. This is all the other information that that basically it's sent to you just showing that you can kind of retrieve that through the app registration overview screen. Now if we go to subscriptions, we should be able to take a look at the pay as you go subscription.05:52And then I should be able to pivot into yep, I am, and then roles. This roles will be, well actually probably need to filter here, so we'll look for MCD or Jason, there we go. And you can see that bottom one is the one that kind of correlates to.06:09To what we just created, you can look at all the different permissions that were assigned to it.06:29Again, most of this is documented within our documentation as to what permissions are needed, where. Now, all of this, you know, this role, that app registration, they're all kind of tied together in the assignments section. So you'll see.06:34In the assignments, and this actually shouldn't be that long, I should just be able to scroll down. Yeah, right here. The app registration is actually tied to that controller role through these assignments. So that's kind of where all this, you know, comes together from a roles, rights, and responsibility standpoint.06:49That said, we could also use the same app registration for accessing multiple subscriptions, in a future video it may go through a little bit more detailed. All of the documentation is of course, you know, onboard documentation that you can pivot through and there's couple different places in here where it talks about onboarding. This 1st.07:051st one's really just honed around the wizard, so I do recommend going into the account onboarding section itself and then looking at Azure. It will go through and it'll give you essentially all the different ways that you can onboard this, whether through the wizard or if you wanted to do that using manual processes.07:25Again both go into pretty excruciated detail as to what you need in place in order to properly onboard that Azure account. You can see all the different permissions here and it basically goes through how to tie all those together through roles and role assignments. And with that.07:43As always, if you found this video useful, keep a key eye on this channel as we will be releasing more and more content around the deployment and uses of multi cloud defense and how you can use it to protect your cloud infrastructure. Thank you for watching.08:02We look forward to seeing you in the next video.08:14
