Checks app registrations and sends alerts when client secrets are about to expire.
The Microsoft Azure Billing App Registration Event Monitor checks your app registrations in Microsoft Azure and alerts if the client secrets are due to expire within a specified number of days.
This event monitor provides the following options:
Use this option to alert you if the event monitor is unable to connect to Microsoft Azure. Reasons for a failure to connect include invalid security tokens and loss of external network access.
Use this option to receive an alert of your choice when an app registration is added.
Use this option to receive an alert of your choice when an app registration is removed.
This option will alert you with your choice of severity when one or more client secrets are found to have expired.
This option lets you specify the number of days before client secret expiry that you'll receive an alert.
Check this box to exclude alerts about client secrets that have already expired.
Check this box to add a table of client secrets to the event text generated each time the event monitor runs.
Check the box next to this option to include a list of all client secrets in the notification generated each time the event monitor runs.
This option lets you include valid client secrets in the text generated each time the event monitor runs.
Check this box to include a list of all expired client secrets in the notification generated each time the event monitor runs.
Use this checkbox to show all client secrets expiring in the next 30 days in the notification generated each time the event monitor runs.
This option lets you list app registrations to check. All app registrations not listed here will not be checked.
List app registrations to ignore in this text box. The event monitor will skip monitoring these app registrations.
Enter a list of client secrets to ignore in this text box. The event monitor will skip monitoring these client secrets.
First, you'll need to create an app registration to add to your event monitor's authentication profile. Information on how to do this can be found in our "Creating an Azure Authentication Profile" article.
Your event monitor will need Application.Read.All, Directory.Read.All, and User.Read permissions with the delegated type. Additionally, you'll need Application.Read.All permissions with the application type under Microsoft Graph.
This event monitor generates the following data points:
|App Registrations||Total app registration count.|
|Deleted App Registrations||Total number of deleted app registrations.|
|New App Registrations||Number of new app registrations since last event monitor run.|
Add a comment