Unable to run Azure Cloud Scan about prowler HOT 5 CLOSED

Hi @imvignesh27, thanks for the report.

In our test environment, we are failing to replicate this error, it is likely the issue may lie with the credentials that you are using. Please refer to the documentation to ensure all permissions are correctly set and the service principal application is properly created. Also, verify if the subscription ID is well typed and exists in the same tenant as the service principal application.

If the error persists, send the output again adding the --log-level ERROR flag and omit the --subscription-id to further isolate the issue.

from prowler.

I'm just getting the below error :

2024-04-15 11:45:24,236 [File: azure_provider.py:275] [Module: azure_provider] ERROR: ClientAuthenticationError[269] -- DefaultAzureCredential failed to retrieve a token from the included credentials.
Attempted credentials:
EnvironmentCredential: Authentication failed: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1006)
To mitigate this issue, please refer to the troubleshooting guidelines here at https://aka.ms/azsdk/python/identity/defaultazurecredential/troubleshoot.

2024-04-15 11:45:29,386 [File: azure_provider.py:350] [Module: azure_provider] CRITICAL: Error with credentials provided getting subscriptions and tenants to scan

2024-04-15 11:45:29,387 [File: azure_provider.py:353] [Module: azure_provider] CRITICAL: ClientAuthenticationError[324] -- DefaultAzureCredential failed to retrieve a token from the included credentials.
Attempted credentials:
EnvironmentCredential: Authentication failed: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1006)
To mitigate this issue, please refer to the troubleshooting guidelines here at https://aka.ms/azsdk/python/identity/defaultazurecredential/troubleshoot.

from prowler.

Hi again @imvignesh27, I have been studying your problem further and my conclusion is that the problem with the cert verify could be because you are using a system with a proxy configured.

If it is the case refer to the official documentation of Microsoft, if it is not the case I could need more details of your system or about the Service Principal that you use to authenticate because it was impossible to me to reproduce the same error on a Kali machine. Thanks for the feedback and I wait for your response.

from prowler.

Yes, I think the proxy is the problem. I'm also running in kali machine. I had generated the AWS report but azure only I'm getting these errors. I will refer your document link and comeback to u 👍

from prowler.

Hi @imvignesh27, we are closing this issue. Please feel free to reopen it if you notice the same behaviour or if you want to add something.

Thanks for using Prowler 🚀

from prowler.