Skip to content

Commit 39b2251

Browse files
author
iru
authored
docs: compliance manual guideliness for azure (#152)
1 parent e621fa0 commit 39b2251

File tree

1 file changed

+6
-4
lines changed

1 file changed

+6
-4
lines changed

use-cases/manual-compliance.md

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,15 @@
11
# Compliance
22

3+
4+
## AWS
35
On each account where compliance wants to be checked (`AWS_ACCOUNT_ID`), we need to provide a role for Sysdig to be able to impersonate and perform `SecurityAudit` tasks.
46

57
In addition, we must make Sysdig aware of these accounts and role.
68
We will guide you to provide, on the Sysdig Secure SaaS backend, the following resources:
79
- a cloud-account for each account of your organization where compliance is wanted to be checked
810
- a task that will run `aws_foundations_bench-1.3.0` schema on previously defined accounts
911

10-
## Sysdig Side
12+
### Sysdig Side
1113

1214
1. **Register cloud accounts** on Sysdig
1315

@@ -81,7 +83,7 @@ From the resulting payload get the `externalId` attribute value, it should be a
8183
8284
<br/>
8385
84-
## Customer's Side
86+
### Customer's Side
8587
8688
Now create `SysdigCompliance` role on each account using the values gathered in previous step.
8789
- Add `arn:aws:iam::aws:policy/SecurityAudit` AWS managed policy
@@ -99,7 +101,7 @@ Now create `SysdigCompliance` role on each account using the values gathered in
99101
}
100102
```
101103
102-
## End-To-End Validation
104+
### End-To-End Validation
103105
104106
Validate if Sysdig <-> Customer infra connection is properly made using [`/cloud/accounts/{accountId}/validateRole`](https://secure.sysdig.com/swagger.html#tag/Cloud/paths/~1api~1cloud~1v2~1accounts~1{accountId}~1validateRole/get)
105107
@@ -111,7 +113,7 @@ $ https://<SYSDIG_SECURE_ENDPOINT>/api/cloud/v2/accounts/<AWS_ACCOUNT_ID>/valida
111113
You should get success or the reason of failure.
112114
113115
114-
## Testing
116+
### Testing
115117
116118
Check within Sysdig Secure
117119
- Posture > Compliance for the compliance task schedule

0 commit comments

Comments
 (0)