Skip to main content

Creating an Application for Azure CDN

You can add your Azure CDN to IO River and use it with your services. In order to add Azure CDN as one of your CDN providers, you need to have an Azure application which can be used with IO River. In general, the application needs to have permissions to manage your Azure CDN in your Azure account.

Step 1 - Registering IO River application:

  1. Sign in to your Azure account.
  2. Navigate to App registrations in your Azure account.
  3. Click on New Registration.
  4. Fill the registration form:
    1. Type IORiver for the name of the application.
    2. Click on Register.
  5. Select the API permissions tab in the sidebar to set permissions:
    1. Click on Add permission.
    2. Click on Microsoft Graph.
    3. Click on Application permissions.
    4. Select User.Read.All and click on Add permission.
    5. Click on Grant admin consent to IO River.
  6. Select the Certificate & secrets tab in the sidebar to create a secret:
    1. Click on New client secret.
    2. Set description & expiration, and click on Add.
    3. Copy the value of the secret
  7. Select the Overview tab in the sidebar and copy the following credentials:
    • Application ID (Client ID)
    • Directory ID (Tenant ID)

Step 2 - Providing permissions (roles) to the applicaton:

  1. Navigate to the relevant Resource Group in your Azure account.
  2. Select Access control (IAM) from the sidebar.
  3. Select the Role assignments tab.
  4. Click on Add and select Add Role assignments.
  5. Add the role CDN profile contributor.
  6. Click on Next
  7. Click on Select members.
  8. Search for the IORiver application, and click on Select.
  9. Click on Review + assign.

Repeat steps 4-9 to add the following additional roles:

  • CDN profile reader
  • Monitoring reader
  • Key vault administrator
  • Key vault certificate officer
  • Key vault contributor

In addition to the values copied in Step 1, also copy the Subscription ID and the name of your Resource Group.

Example of Azure credentials:​

tenant_id = "d201248a-c2e9-402e-8281-a5d3eefd8d3d"
client_id = "f9c47934-d594-4f65-8df5-4e71c58de5dd"
client_secret = "B9M8Q~E8nKhbrGTSRGS5TXUfQ0WdZ11JJoytEc_-"
subscription_id = 'e986b596-dbc9-cf41-8666-985b32e6bf71'
resource_group = "staging"

Add the credentials when you add your Azure CDN here.