Views:

Connect an Azure subscription in one of the supported China regions (China East 2, China North 2, or China North 3) to Cloud Accounts using Terraform deployment with LocalShell.

Azure subscriptions in China regions require a different connection process than subscriptions in other Azure regions. China region subscriptions must use single subscription deployment with Terraform and LocalShell (Azure Cloud Shell is not available in China regions). Before you begin, review the permission requirements and region limitations for connecting an Azure subscription to Cloud Accounts.
Before you begin, ensure you have:
  • Azure CLI installed and configured on your local machine. For installation instructions, see Install Azure CLI.
  • Terraform 1.9.5 or later installed on your local machine.
  • An Azure subscription in one of the supported China regions: China East 2 (chinaeast2), China North 2 (chinanorth2), or China North 3 (chinanorth3)
Important
Important
Azure China regions only support single subscription deployment. Management group deployment is not available for China regions.

Procedure

  1. Sign in to TrendAI Vision One™.
  2. Go to Cloud Security → Cloud Accounts → Azure.
  3. Click Add Subscription.
  4. On the Deployment Type screen, select Single subscription.
    Note
    Note
    Management group deployment is not supported for Azure China regions.
  5. Click Next.
  6. On the General Information screen, specify the following:
    • Subscription ID: Enter your Azure subscription ID
    • Name: Enter a name for this connection
    • Description (optional): Enter a description
    • Region: Select one of the supported China regions:
      • China East 2 (chinaeast2)
      • China North 2 (chinanorth2)
      • China North 3 (chinanorth3)
  7. If you have more than one Server & Workload Protection Manager instance, select the instance to associate with the connected subscription.
  8. Click Next.
  9. On the Features and Permissions screen, select the features you want to enable for this subscription.
    For more information about each feature and permission set, see Azure features and permissions. Note that some features are not supported in China regions.
  10. Click Next.
  11. On the Launch screen, access your local terminal and connect to Azure using the Azure CLI.
  12. Run the az login command and set the subscription context:
    az cloud set --subscription <subscription-id> && az login
    Follow the prompts to complete authentication.
  13. In LocalShell, use the following command to create the deployment folder:
    mkdir [SubscriptionID] && cd [SubscriptionID]
  14. Download the Terraform template. Choose one of the following methods:
    • Curl command: copy the command in the Launch screen to download the file to your cloud environment.
    • Manual: Click Download the Terraform Template.
  15. Extract the template by copying the command:
    unzip -o cloud-account-management-terraform-package-[random-number].zip -d cloud-account-management-terraform-package
  16. Navigate to the deployment folder by running the following command:cd cloud-account-management-terraform-package
  17. Execute the Terraform script: ./deploy.sh
  18. After the deployment completes successfully, return to the TrendAI Vision One™ console and click Done.
    The Azure subscription appears in Cloud Accounts with the selected features enabled. It may take a few minutes for the Azure subscription to appear.