Credential Management

Create and Register Credentials

To register credentials in CS Checker, you must first create credentials on each CSP's page. Credential registration can be done via Settings-Credential Management.

What is a Credential?

Credentials are encrypted information such as user login details and personal information.

 

Registering Azure Credentials

Click the Register Button.

Click the 🔗 link icon next to each field to access azure docs. Refer to the documentation to fill in the fields.

1. Go to Settings-Credential Management and click the Register Button.
2. Select Azure.
3. Enter the credential name.

• Must start with an English letter.
• Special characters other than numbers, underscores, and hyphens are not allowed.
• Must be 4 to 20 characters long.

4. Log in to the Azure Potal.

5. Click on Azuer Active Directory.

   

6. Click App Registrations>New Registration.
7. n's registration details.

• Enter a name for the application(e.g., AspNetCore-WebApp). This name may be visible to app users and can be changed later.
• Select the account types supported by the application.
• For the Redirect URI, add the type and destination URI where the application will receive the token response after successful authentication. For example: https://localhost:44321
• Select Register.

8. Under Manage, select Authentication and add the following information:

• In the Web section, add https://localhost:44321/signin-oidc as the Redirect URI.
• Enter https://localhost:44321/signout-oidc in the Front-channel logout URL.
• In the Implicit grant and hybrid flows section, select ID tokens.
• Click Save.

9. The owner of the registered app must assign access permissions to allow other users to access the registered app. To assign roles, click on the app you just created.

• 9-1. Click Access Control (IAM). The following example shows the Access Control (IAM) page for a resource group.
• 9-2. Click the Role Assignments tab to view role assignments for the relevant scope.
• 9-3. Click Add>Add Role Assignment.
• 9-4. In the Role tab, select the role you want to assign.
• 9-5. In the Details columns, click View to check detailed information about the role.
• 9-6. Click Next.
• 9-7. In the Members tab, select users, groups, or service principals to assign the selected role to one or more Azure AD users, groups, or service principals (applications).
• 9-8. Click Select Members.
• 9-9. Search for and select the user, group, or service principal.
• 9-10. To assign the selected role to one or more Managerd Identities, select Managed Identities.
• 9-11. To assign the selected role to one or more Managerd Identities, select Managed Identities.
• 9-12. Click Select Members.
• 9-13. In the Managed Identity selection window, choose whether the type is User-Assigned Managed Identity or Managed Identity.
• 9-14. Search for and select the Managed Identity.
• 9-15. Click Select to add the Managed Identity to the members list, and then Click Next.
• 9-16. Click Review + Assign to assign the role. After a few minutes, the role will be assigned to the security principal in the selected scope.
• 9-17. If a description for the role assignment does not appear, click Edit Columns to add the Description column.

 

info

For detailed instructions on assigning Azure roles using the Azure Portal, refer to the link below: https://learn.microsoft.com/ko-kr/azure/role-based-access-control/role-assignments-portal

 

10. Enter the Directory (Tenant) ID into the Tenant ID field in CS Checker. Enter the Application (Client) ID into the Service Principal ID field in CS Checker.

    

11. Click Certificates & Secrets in the left sidebar.

12. Click New Client Secret.

13. Enter a brief description for the key and select the expiration time. Once completed, click Add.

14. Copy the generated value and paste it into the Service Principal field in CS Checker.

 

caution

Created Service Principal Key cannot be viewed again if you refresh the page. It is recommended to write it down immediately. If you forget the key value, you can generate a new one, but this is not recommended.

13. Return to the Home page on the Azure Portal and click on Subscriptions.

    

14. Enter the Description ID into the Subscription ID field in CS Checker.

    

15. Click the Register.

tip

To register credentials with Azure CLI, please refer to the link below. https://docs.microsoft.com/ko-kr/cli/azure/what-is-azure-cli

 

Registering AWS credentials

1. Log in to IAM at https://console.aws.amazon.com/iam/ to open the console.

2. On the console home, click My Account in the upper right corner, then select Security Credentials.

   

3. Click Access Keys.

4. Click Create New Access Key.

   

5. Click Show Access Key or download the Excel file to check the key.

   

caution

If you do not dwonload the key file containing the new Access Key ID and Secret Access Key at the time of initial key creation, you will not be able to retrieve the Secret Access Key again.

References

• Create Azure Credentials
• Create AWS Credentials

Deleting Credentials

On the credentials management page, you can view and delete credential information. To delete registered crednetials, please follow the steps below.

1. Click Setting > Credentials Management.

   

2. Check the credential information to delete and click Delete Button.

   

3. Enter the Credential Name you registered, then click the Delete Button to complete the deletion.