Integrate with Microsoft Azure

You can integrate Tenable Attack Surface Management with Azure to add sources from Azure to your inventories. Tenable Attack Surface Management pulls data from the following sources:

  • Azure App Service

  • Azure DNS

  • Azure Redis Cache

  • Azure Virtual Machines

  • MySql in Azure

  • MySql Flexible in Azure

  • PostgresSQL in Azure

  • PostgresSQL Flexible in Azure

  • MariaDB in Azure

  • SQL in Azure

Before you begin

  • Make sure that Azure keys have read-only privileges. For instance, you can use the Azure built-in Reader role. For more information, see Azure built-in roles for General in the Azure documentation.

  • Make sure that you have the following Azure information:

    • Tenant ID

    • Application ID

    • Client Secret

To integrate Azure with Tenable Attack Surface Management

  1. In the upper-right corner, click the button.

    The All Integrations page appears.

  2. In the left navigation pane, click Azure.

    The Azure integrations page appears with a table that lists the integration name and type.

  3. Do one of the following:

    • In the upper-right corner, click Add Azure.

    • In the header bar, click Add Azure.

      The Add Azure Integration window appears.

  4. In the Name box, type a name for the integration.

  5. In the Tenant ID box, provide your tenant ID.

  6. In the Application ID box, provide the application ID.

  7. In the Client Secret box, provide the client secret.

  8. Click Add.

    9. Tenable Attack Surface Management saves the integration and lists it in the Integrations table. Once the integration is complete, you can add sources from Azure. For more information, see Add Sources from Azure.