To authorize Carbon Black Cloud to access your designated storage container, perform the following procedure.

Prerequisites

  1. from Azure Forwarding Identity Credentials.
  2. Create an Azure Blob Container

Procedure

  1. In the Azure console, click Managed Identities.
  2. Click + Create.
    1. In the Project details section, select the Subscription and Resource Group with which to associate the Managed Identity. We recommend that you use the same settings as those established for the Azure storage account for your Data Forwarder. (See Step 3 in Create an Azure Storage Account.)
    2. In the Instance details section, select the appropriate Region that correspond to the Carbon Black Cloud URL to which your organization belongs. See Azure Forwarding Identity Credentials.
    3. Provide a unique name for the Managed Identity.
    4. Select Review + Create, click Create, and then click Go to resource.
    5. From the sidebar, select Federated Credentials.
    6. Click + Add Credential.
    7. Under Federated Credential Scenario, select Other.
    8. For Issuer URL, enter https://cognito-identity.amazonaws.com.
    9. From the Azure Forwarding Identity Credentials table, select the combination of Subject identifier and Audience that correspond to your Carbon Black Cloud URL.
    10. Enter the Subject identifier.
      Caution: Validate your entry to make sure it exactly matches the field data.
    11. Enter a unique name for the Federated Credential, such as Carbon-Black-Cloud-Data-Forwarder.
    12. Under Audience (optional), click Edit and overwrite the Audience value with the value found in the Audience column that corresponds to the Carbon Black Cloud URL in the Azure Forwarding Identity Credentials table.
  3. Navigate to your designated Azure Storage Container.
    1. From the sidebar, select Access Control (IAM).
    2. Click + Add and select Add role assignment from the dropdown menu.
    3. Select the Storage Blob Data Contributor role.
    4. Under Assign access to, select Managed Identity.
    5. Click + Select Members.
    6. From the right panel:
      1. Select the Subscription under which your Managed Identity was registered.
      2. Under Managed Identity, select User-assigned managed identity.
      3. Select the Managed Identity you created for use with your Carbon Black Cloud Data Forwarder.
      4. Click Select.
    7. Click Review + Assign two times.