Azure Arc
A Microsoft cloud service that enables deployment of Azure services across hybrid and multicloud environments.
468 questions
[Microsoft Defender For Cloud] Troubleshooting autoprovisionning of AWS EC2 in Azure Arc not working
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(140.8, 66%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAB%3C/text%3E%3C/svg%3E)
Arno Birchler
0
Reputation points
I'm having a problem with automatic onboarding of AWS EC2s in Azure Arc. Everything seems to be configured correctly, but the Azure Arc agent doesn't install on the EC2s.
Azure side :
- Microsoft Defender For Cloud > Environment Settings: The AWS account is set to connected status. Onboard type is "Single account". The only active plan is Servers P1. Monitoring coverage is "Partial", but Azure Arc agent and extensions are enabled.
Microsoft Defender For Cloud > Inventory: AWS resources are present with recommendations.
Microsoft Defender For Cloud > Getting Started > Install agents: A message tells me "All set! All of your Azure subscriptions have automatic agent installation enabled".
Azure Arc > All Azure arc resources : Empty (I have waited more than 24h and still nothing.)
Azure Arc > Service principals : One has been configured with the right resource group.
Subscription > Resource providers : Microsoft.HybridCompute, Microsoft.GuestConfiguration, Microsoft.HybridConnectivity are registered.
Amazon side:
CloudFormation script deployed
EC2s have SSM agent installed
EC2s have the IAM role "AmazonSSMManagedInstanceCore".
In CloudTrails we can see the exchanges for Microsoft Defender for Cloud CSPM, but there is no trace of any attempt to assume the role for ArcAutoProvisioningRole from Azure.
With these elements I conclude that Azure makes no request to Amazon for the deployment of agents. I therefore assume that the problem lies with Azure.
Is there a way to see what Azure is doing? An onboarding dashboard, so that you can understand where the problem is coming from?
Have I missed something in the configuration?
Thanks in advance for your help!
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(211.20000000000002, 43%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMM%3C/text%3E%3C/svg%3E)
Monalla-MSFT 13,046 Reputation points2023-11-16T15:49:51.6166667+00:00 @Arno Birchler - Thanks for reaching out to us and apologies for the delay in responding to you. I have reached out to our internal product team regarding your issue, and I will get back to you as soon as I can. Thank you for your patience while I work on resolving your issue.
-
Monalla-MSFT 13,046 Reputation points
2023-12-13T00:01:55.5133333+00:00 @Arno Birchler - Thank you for reaching out to us and for being patient.
Looks like we need to troubleshoot this further, we would like to put you in touch with a support engineer so you can receive 1:1 support for a deeper investigation on this.
We would need you to send us an email at AzCommunity@Microsoft.com by providing below details.
Subject : ATTN:Monika
- Subscription ID
- A link to this thread.
Please email us these details and we will work with you closely to get this issue taken care of and also post any findings here in the thread so the community can benefit from it.
Thanks in advance. Looking forward for your email.
Sign in to comment
Sign in to answer