Getting Started¶

Prerequisites¶

Before you begin, ensure you have:

• [x] Azure subscription with Owner or Contributor role
• [x] Azure CLI installed and signed in (az login)
• [x] A CertifyClouds licence key
• [x] Azure Container Registry (ACR) with the CertifyClouds image
• [x] Network access configured (subnets for app + database)

Setup Path¶

Quick Overview¶

Step 1: Deploy¶

Deploy CertifyClouds to Azure Container Apps or Container Instances. The deployment creates:

• Application container with managed identity
• PostgreSQL Flexible Server for data storage
• VNet integration for secure network access

On a new install the deploy stops before CertifyClouds starts and prints the access command for Step 2, with the managed identity's principal ID filled in.

Step 2: Configure¶

Grant the managed identity read access to your Key Vaults with the command the deploy printed, then run the same deploy command again to start CertifyClouds:

./setup-certifyclouds-access.sh --principal-id $PRINCIPAL_ID --subnet-id $APP_SUBNET_ID --apply

Step 3: Scan¶

Add your Azure subscriptions and run a Key Vault scan. CertifyClouds will find all secrets, keys, and certificates across your Key Vaults.

Step 4: Monitor¶

Review your compliance score, configure alerts for expiring credentials, and set up rotation policies (PRO tier).