Role based authentication enabled for the service principal using ARM template
To ensure that the Appranix managed service principal has all necessary permissions to discover, protect and recover either in the same region or in a different region, we made sure that we introduce few custom roles and group permissions specific to each operation under the custom roles and assign it back to the service principal.
The Role Names are carefully designed to be self-explanatory so that our customers can be sure of why particular permission is assigned to the service principal.
The details on the roles and the permission are given in this document.
Related Articles
AWS Inline IAM policy to a Managed IAM policy Migration
To support our enterprise customers with large number of accounts, as an enhancement feature, we migrated from an AWS inline IAM policy to a managed IAM policy. There was a character limitation in the AWS inline policy which did not allow more that ...Steps to enable Multi-Factor Authentication in Appranix
Appranix provides additional security by allowing users to enable Multi-factor authentication to log in. Below are the steps that allow users to enable Multi-factor authentication in Appranix 1) Once logged into Appranix, select the My Profile 2) ...Azure native replication implementation
Azure Cloud has recently extended their support for replication using managed snapshots from one region to another. With this capability, we will be leveraging the Azure native replication to do incremental copy of the snapshots. Data replication is ...[Azure] Cross Region Blob/Block Level Replication
Appranix has enabled cross-region recovery support for the Azure cloud. Now you can move all your workloads from one region to another region in Azure. Azure doesn't support incremental snapshots from one region to another. Due to this limitation, a ...Recover and Replace Existing Resources in Azure
During recovery in Azure, the “Override resource dependencies” option if selected will override all the dependencies of the selected resources. While the override option is enabled, and if a Virtual machine or VMSS under a Resource group is selected ...