Skip to main content

Creating a Role for Azure Front Door

You can add your Azure Front Door to IO River and use it with your services.
To use Azure Front Door, you need to set up the following:

  • A Key Vault with access granted to Front Door
  • A Role assignment that provides IO River access to Front Door

You can follow the steps described below, or download this script to perform the setup automatically.

Step 1 – Creating a Key Vault​

If you already have a Key Vault instance with access to Front Door, you can use it with IO River and skip this step.

Create a Key Vault with access to Front Door:​

  1. Navigate to Key Vaults in the Azure Portal.
  2. Click Create, and select the relevant Subscription and Resource Group.

To provide access to Front Door, you must first register the Azure Front Door service principal as an app. Run the following CLI command:

az ad sp create --id 205478c0-bd83-4e1b-a9d6-db63a3e1e1c8

Once created, assign the appropriate role to allow this service principal access to the Key Vault:

  1. Navigate to the created Key Vault and select Access control (IAM).
  2. Select the Role assignments tab.
  3. Click Add and select Add role assignment.
  4. In the list of roles, select Key Vault Secrets User, then click Next.
  5. Click Select members and search for Microsoft.AzureFrontDoor-Cdn.
  6. Click Next to complete the role assignment.

Step 2 – Creating a Role for IO River​

Follow the steps below to create the role for IO River:

  1. Navigate to the relevant Resource Group in your Azure account.

  2. Select Access control (IAM) from the sidebar.

  3. Open the Role assignments tab.

  4. Create a custom role:

    • Click Add and then Add custom role.
    • Select Start from JSON.
    • Use this JSON file.
      Before using the file, replace the subscription ID and resource group placeholders with your own values.
    • Complete the wizard to finish creating the role.

  5. Create a role assignment:

    • Click Add and then Add role assignment.
    • Search for the role created in the previous step (e.g., ioriver-role), then click Next.
    • Click Select members, search for ioriver-platform, and select the application.
    • Click Next to complete the role assignment.

Once completed, you can provide your Azure account details as shown in the example below.

Example of Azure Front Door Credentials​

tenant_id = "d201248a-c2e9-402e-8281-a5d3eefd8d3d"
subscription_id = 'e986b596-dbc9-cf41-8666-985b32e6bf71'
resource_group = "staging"