Updated info related to using the KeyVault to store the API Key.
This commit is contained in:
eerus 2022-12-19 19:22:01 -06:00 коммит произвёл GitHub
Родитель 2eb03064da
Коммит 6d788faf0f
Не найден ключ, соответствующий данной подписи
Идентификатор ключа GPG: 4AEE18F83AFDEB23
1 изменённых файлов: 5 добавлений и 11 удалений

Просмотреть файл

@ -3,20 +3,22 @@
This playbook restores the latest good Helios snapshot. Its recommended for running by Backup Admins _only_ after they make sure that the existing data is compromised and rollback to the previous snapshot, even at the expense of data loss, is _really required_.
## Prerequisites
1. Create _DataHawk API_ key:
1. Create the _DataHawk API_ key:
* Go to the Cohesity Helios [login](https://helios.cohesity.com/#/login) page.
* Enter your credentials and select _Log In_. The _Summary_ page is displayed.
* Navigate to _Settings > Access Management_. The _Users_ tab is displayed.
* Select _Add API Key_. The API Key Details is displayed.
* Enter a name for the API key.
* Select _Save_.
2. Create your Azure KeyVault (see [instructions](https://learn.microsoft.com/en-us/azure/key-vault/general/quick-create-portal)).
* Create the _ApiKey_ secret and assign the _API Key_ value from the previous step to it. Now your API key is securely saved in the Azure KeyVault.
## Deployment instructions
1. Deploy the playbook by clicking on "Deploy to Azure" button. This will take you to deploying an ARM Template wizard.
1. Deploy the playbook by clicking on the "Deploy to Azure" button. This will take you to deploying an ARM Template wizard.
[![Deploy to Azure](https://aka.ms/deploytoazurebutton)](https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2Fcohesity%2FAzure-Sentinel%2FCohesitySecurity.internal%2FSolutions%2FCohesitySecurity%2FPlaybooks%2FCohesity_Restore_From_Last_Snapshot%2Fazuredeploy.json)
2. Fill in the required parameters:
* __Playbook Name:__ Enter the playbook name here.
* __API Key:__ Enter your DataHawk API key.
* __KeyVault Store Name:__ Enter your KeyVault store name here.
## Post-Deployment instructions
1. (_Recommendation_) Limit access rights to this playbook to only Backup Admins because this playbook rolls back customer data that can result in a loss of important data if used without a good reason.
@ -26,13 +28,5 @@ This playbook restores the latest good Helios snapshot. Its recommended for r
* Select the required resource group and click _Apply_.
* Select _Done_.
## Troubleshooting
1. If you need to update your API key in the playbook, follow these steps
* In your Microsoft Sentinel Instance, go to the _Automation_ under the _Configuration_ pane.
* Under _Active Playbooks_, select the playbook and click on _Edit_.
* Select the _HTTP connector_.
* Under the _Headers_ section, enter the API key generated on Helios platform.
* Select _Save_.
# References
- [Cohesity support documentation](https://docs.cohesity.com/ui/login?redirectPath=%2FHomePage%2FContent%2FTechGuides%2FTechnicalGuides.htm)