Skip to content

Commit 2b22126

Browse files
nico-stefaninico-stefani
committed
Remove deprecated references for plain text auth in Azure wodle
1 parent 807e25e commit 2b22126

File tree

2 files changed

+4
-178
lines changed

2 files changed

+4
-178
lines changed

‎source/cloud-security/azure/activity-services/prerequisites/credentials.rst

Lines changed: 1 addition & 73 deletions
Original file line numberDiff line numberDiff line change
@@ -35,14 +35,8 @@ Getting access credentials for Storage
3535
:align: center
3636
:width: 100%
3737

38-
39-
Authentication options
40-
----------------------
41-
42-
There are two different ways to set up the Azure authentication:
43-
4438
Using an authentication file
45-
^^^^^^^^^^^^^^^^^^^^^^^^^^^^
39+
----------------------------
4640

4741
It is possible to store the credentials in a file for authentication as long as the file content follows the `field = value` format explained below.
4842

@@ -113,70 +107,4 @@ Regardless of the service or activity to be monitored, the authentication file i
113107
114108
Check the :doc:`azure-logs wodle </user-manual/reference/ossec-conf/wodle-azure-logs>` section from the ossec.conf reference page for more information about the ``<auth_path>`` and other available parameters.
115109

116-
117-
Inserting the credentials into the configuration
118-
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
119-
120-
.. deprecated:: 4.4.0
121-
122-
Another authentication option is to set up credentials by storing them directly into the Wazuh configuration file ``/var/ossec/etc/ossec.conf``, inside of the ``<graph>``, ``<log_analytics>`` and ``<storage>`` blocks on the module configuration.
123-
124-
The tags to use are different depending on the type of service or activity to be monitored:
125-
126-
.. rubric:: Microsoft Graph and Log Analytics
127-
:class: h5
128-
129-
.. code-block:: none
130-
:emphasize-lines: 6, 7, 18, 19
131-
132-
<wodle name="azure-logs">
133-
<disabled>no</disabled>
134-
<run_on_start>yes</run_on_start>
135-
136-
<log_analytics>
137-
<application_id>8b7...c14</application_id>
138-
<application_key>w22...91x</application_key>
139-
140-
<tenantdomain>wazuh.onmicrosoft.com</tenantdomain>
141-
<request>
142-
<query>AzureActivity</query>
143-
<workspace>d6b...efa</workspace>
144-
<time_offset>1d</time_offset>
145-
</request>
146-
</log_analytics>
147-
148-
<graph>
149-
<application_id>8b7...c14</application_id>
150-
<application_key>w22...91x</application_key>
151-
152-
<tenantdomain>wazuh.onmicrosoft.com</tenantdomain>
153-
<request>
154-
<query>auditLogs/directoryAudits</query>
155-
<time_offset>1d</time_offset>
156-
</request>
157-
</graph>
158-
</wodle>
159-
160-
.. rubric:: Storage
161-
:class: h5
162-
163-
.. code-block:: none
164-
:emphasize-lines: 6, 7
165-
166-
<wodle name="azure-logs">
167-
<disabled>no</disabled>
168-
<run_on_start>yes</run_on_start>
169-
170-
<storage>
171-
<account_name>exampleaccountname</account_name>
172-
<account_key>w22...91x</account_key>
173-
174-
<container name="insights-operational-logs">
175-
<blobs>.json</blobs>
176-
<content_type>json_inline</content_type>
177-
<time_offset>24h</time_offset>
178-
</container>
179-
</storage>
180-
</wodle>
181-
182110
Take a look at the :doc:`azure-logs wodle </user-manual/reference/ossec-conf/wodle-azure-logs>` entry from the ``ossec.conf`` reference page for more information about the parameters.

‎source/user-manual/reference/ossec-conf/wodle-azure-logs.rst

Lines changed: 3 additions & 105 deletions
Original file line numberDiff line numberDiff line change
@@ -29,8 +29,6 @@ Options
2929
- `time`_
3030
- `timeout`_
3131
- `log_analytics`_
32-
- `log_analytics\\application_id`_
33-
- `log_analytics\\application_key`_
3432
- `log_analytics\\auth_path`_
3533
- `log_analytics\\tenantdomain`_
3634
- `log_analytics\\request`_
@@ -39,17 +37,13 @@ Options
3937
- `log_analytics\\request\\workspace`_
4038
- `log_analytics\\request\\timeout`_
4139
- `log_analytics\\request\\time_offset`_
42-
- `graph\\application_id`_
43-
- `graph\\application_key`_
4440
- `graph\\auth_path`_
4541
- `graph\\tenantdomain`_
4642
- `graph\\request`_
4743
- `graph\\request\\tag`_
4844
- `graph\\request\\query`_
4945
- `graph\\request\\timeout`_
5046
- `graph\\request\\time_offset`_
51-
- `storage\\account_name`_
52-
- `storage\\account_key`_
5347
- `storage\\auth_path`_
5448
- `storage\\tag`_
5549
- `storage\\container`_
@@ -76,10 +70,6 @@ Options
7670
+----------------------------------------+----------------------------------------------+
7771
| `log_analytics`_ | N/A |
7872
+----------------------------------------+----------------------------------------------+
79-
| `log_analytics\\application_id`_ | Any string |
80-
+----------------------------------------+----------------------------------------------+
81-
| `log_analytics\\application_key`_ | Any string |
82-
+----------------------------------------+----------------------------------------------+
8373
| `log_analytics\\auth_path`_ | File path |
8474
+----------------------------------------+----------------------------------------------+
8575
| `log_analytics\\tenantdomain`_ | Any string |
@@ -98,10 +88,6 @@ Options
9888
+----------------------------------------+----------------------------------------------+
9989
| `graph`_ | N/A |
10090
+----------------------------------------+----------------------------------------------+
101-
| `graph\\application_id`_ | Any string |
102-
+----------------------------------------+----------------------------------------------+
103-
| `graph\\application_key`_ | Any string |
104-
+----------------------------------------+----------------------------------------------+
10591
| `graph\\auth_path`_ | File path |
10692
+----------------------------------------+----------------------------------------------+
10793
| `graph\\tenantdomain`_ | Any string |
@@ -118,10 +104,6 @@ Options
118104
+----------------------------------------+----------------------------------------------+
119105
| `storage`_ | N/A |
120106
+----------------------------------------+----------------------------------------------+
121-
| `storage\\account_name`_ | Any string |
122-
+----------------------------------------+----------------------------------------------+
123-
| `storage\\account_key`_ | Any string |
124-
+----------------------------------------+----------------------------------------------+
125107
| `storage\\auth_path`_ | File path |
126108
+----------------------------------------+----------------------------------------------+
127109
| `storage\\tag`_ | Any string |
@@ -248,52 +230,24 @@ Defines the use of the Azure Log Analytics REST API to get the desired logs.
248230

249231
This block configures the integration with Azure Log Analytics REST API.
250232

251-
- `log_analytics\\application_id`_
252-
- `log_analytics\\application_key`_
253233
- `log_analytics\\auth_path`_
254234
- `log_analytics\\tenantdomain`_
255235
- `log_analytics\\request`_
256236

257237
+----------------------------------------+----------------------------------------------+
258238
| Options | Allowed values |
259239
+========================================+==============================================+
260-
| `log_analytics\\application_id`_ | Any string |
261-
+----------------------------------------+----------------------------------------------+
262-
| `log_analytics\\application_key`_ | Any string |
263-
+----------------------------------------+----------------------------------------------+
264240
| `log_analytics\\auth_path`_ | File path |
265241
+----------------------------------------+----------------------------------------------+
266242
| `log_analytics\\tenantdomain`_ | Any string |
267243
+----------------------------------------+----------------------------------------------+
268244
| `log_analytics\\request`_ | N/A |
269245
+----------------------------------------+----------------------------------------------+
270246

271-
log_analytics\\application_id
272-
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
273-
274-
Identifier of the application that we will use for the authentication and to be able to use the Azure Log Analytics API. It must be used next to the ``application_key`` option obligatorily. Incompatible with ``auth_path`` option.
275-
276-
+--------------------+--------------------+
277-
| **Default value** | N/A |
278-
+--------------------+--------------------+
279-
| **Allowed values** | Any string |
280-
+--------------------+--------------------+
281-
282-
log_analytics\\application_key
283-
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
284-
285-
Key to the application we will use for authentication and to be able to use the Azure Log Analytics API. It must be used next to the ``application_id`` option obligatorily. Incompatible with ``auth_path`` option.
286-
287-
+--------------------+--------------------+
288-
| **Default value** | N/A |
289-
+--------------------+--------------------+
290-
| **Allowed values** | Any string |
291-
+--------------------+--------------------+
292-
293247
log_analytics\\auth_path
294248
^^^^^^^^^^^^^^^^^^^^^^^^
295249

296-
Path of the file that contains the application identifier and the application key for authentication in order to use the Azure Log Analytics API. Incompatible with ``application_id`` and ``application_key`` options.
250+
Path of the file that contains the application identifier and the application key for authentication in order to use the Azure Log Analytics API.
297251

298252
+--------------------+--------------------+
299253
| **Default value** | N/A |
@@ -440,52 +394,24 @@ graph
440394

441395
This block configures the integration with Azure Active Directory Graph REST API.
442396

443-
- `graph\\application_id`_
444-
- `graph\\application_key`_
445397
- `graph\\auth_path`_
446398
- `graph\\tenantdomain`_
447399
- `graph\\request`_
448400

449401
+----------------------------------+----------------------------------------------+
450402
| Options | Allowed values |
451403
+==================================+==============================================+
452-
| `graph\\application_id`_ | Any string |
453-
+----------------------------------+----------------------------------------------+
454-
| `graph\\application_key`_ | Any string |
455-
+----------------------------------+----------------------------------------------+
456404
| `graph\\auth_path`_ | File path |
457405
+----------------------------------+----------------------------------------------+
458406
| `graph\\tenantdomain`_ | Any string |
459407
+----------------------------------+----------------------------------------------+
460408
| `graph\\request`_ | N/A |
461409
+----------------------------------+----------------------------------------------+
462410

463-
graph\\application_id
464-
^^^^^^^^^^^^^^^^^^^^^
465-
466-
Identifier of the application that we will use for the authentication and to be able to use the Azure Active Directory Graph API. It must be used next to the ``application_key`` option obligatorily. Incompatible with ``auth_path`` option.
467-
468-
+--------------------+--------------------+
469-
| **Default value** | N/A |
470-
+--------------------+--------------------+
471-
| **Allowed values** | Any string |
472-
+--------------------+--------------------+
473-
474-
graph\\application_key
475-
^^^^^^^^^^^^^^^^^^^^^^
476-
477-
Key to the application we will use for authentication and to be able to use the Azure Active Directory Graph API. It must be used next to the ``application_id`` option obligatorily. Incompatible with ``auth_path`` option.
478-
479-
+--------------------+--------------------+
480-
| **Default value** | N/A |
481-
+--------------------+--------------------+
482-
| **Allowed values** | Any string |
483-
+--------------------+--------------------+
484-
485411
graph\\auth_path
486412
^^^^^^^^^^^^^^^^
487413

488-
Path of the file that contains the application identifier and the application key for authentication in order to use the Azure Active Directory Graph API. Incompatible with the ``application_id`` and ``application_key`` options. Check the :doc:`credentials </cloud-security/azure/activity-services/prerequisites/credentials>` reference for more information about this topic.
414+
Path of the file that contains the application identifier and the application key for authentication in order to use the AAD Graph API.
489415

490416
+--------------------+--------------------+
491417
| **Default value** | N/A |
@@ -603,52 +529,24 @@ storage
603529

604530
This block configures the integration with Azure Storage.
605531

606-
- `storage\\account_name`_
607-
- `storage\\account_key`_
608532
- `storage\\auth_path`_
609533
- `storage\\tag`_
610534
- `storage\\container`_
611535

612536
+----------------------------------+----------------------------------------------+
613537
| Options | Allowed values |
614538
+==================================+==============================================+
615-
| `storage\\account_name`_ | Any string |
616-
+----------------------------------+----------------------------------------------+
617-
| `storage\\account_key`_ | Any string |
618-
+----------------------------------+----------------------------------------------+
619539
| `storage\\auth_path`_ | File path |
620540
+----------------------------------+----------------------------------------------+
621541
| `storage\\tag`_ | Any string |
622542
+----------------------------------+----------------------------------------------+
623543
| `storage\\container`_ | N/A |
624544
+----------------------------------+----------------------------------------------+
625545

626-
storage\\account_name
627-
^^^^^^^^^^^^^^^^^^^^^
628-
629-
Identifier of the account name that we will use for the authentication- It must be used next to the ``account_key`` option obligatorily. Incompatible with ``auth_path`` option.
630-
631-
+--------------------+--------------------+
632-
| **Default value** | N/A |
633-
+--------------------+--------------------+
634-
| **Allowed values** | Any string |
635-
+--------------------+--------------------+
636-
637-
storage\\account_key
638-
^^^^^^^^^^^^^^^^^^^^
639-
640-
Identifier of the account key that we will use for the authentication- It must be used next to the ``account_name`` option obligatorily. Incompatible with ``auth_path`` option.
641-
642-
+--------------------+--------------------+
643-
| **Default value** | N/A |
644-
+--------------------+--------------------+
645-
| **Allowed values** | Any string |
646-
+--------------------+--------------------+
647-
648546
storage\\auth_path
649547
^^^^^^^^^^^^^^^^^^
650548

651-
Path of the file that contains the account name and the account key for authentication. Incompatible with ``account_name`` and ``account_key`` options.
549+
Path of the file that contains the account name and the account key for authentication.
652550

653551
+--------------------+--------------------+
654552
| **Default value** | N/A |

0 commit comments

Comments
 (0)