Task 3: Deploy the Azure BYOA outpost

You can customize your own outpost by bringing your own app (BYOA). This page describes the steps for deploying the Azure BYOA outpost.

While creating the Azure BYOA outpost, you supply the relevant BYOA IDs to Cortex. This topic provides the instructions for deploying the outpost with the advanced BYOA settings.

Step 1. Create the Azure BYOA outpost in Cortex

1. In Cortex Cloud, navigate to Settings → Data Sources & Integrations → Outposts.
2. Click New Outpost.
3. In Cortex Cloud, choose Azure.
4. If you are using a FedRAMP-certified (Government) Cortex Cloud tenant, you are able to choose between the following environments:

   • Commercial: (Default) Standard cloud deployment typically used for private and public sector organizations that do not require isolated government-specific infrastructure.
   • Government: Microsoft Azure Government environments for compatibility with FedRAMP-certified tenants.
5. Enter the instance name and the Entra tenant ID of the Azure tenant in which you want to establish the outpost. The Entra tenant ID is validated automatically. Note: Due to limitations in Terraform, the Azure subscription name cannot contain blanks.
6. Click Show advanced settings and toggle Bring Your Own App (BYOA) on.
7. Enter the following IDs:

   • Tenant ID: Your Entra ID tenant ID, which is validated automatically.
   • Application (client) ID: The Azure application ID, which you retrieved while creating and configuring the app registration in the previous step, either:

     • Using the customer_app_client_id value outputted by the helper shell script's output.
     • Manually, in the Azure portal's Register an application > Overview page.
   • Service Principal Object ID: The Terraform runner's service principal object ID that will execute terraform apply. This you defined while creating and configuring the app registration in the previous step, either:

     • Using the customer_sp_object_id value outputted by the helper shell script's output.
     • Manually, in the Azure portal's Microsoft Entra ID → App registrations → your AppReg → Owners → Add owners page.
8. (Optional) Define tags and tag values to be added to any new resource created by Cortex in the cloud environment. Click Next.
9. Click Download Terraform to download the Terraform template file.

Step 2. Execute the template in Azure to deploy the outpost

In the previous step, you downloaded the Terraform template file in the outpost creation wizard.

Now, you log in to your CSP and execute the Terraform template file.

Follow the instructions for deploying standard Azure outposts.

To view outposts and their details, navigate to Settings → Data Sources & Integrations → Outposts.

What's next?

Proceed to Task 4: Verify the BYOA outpost deployment.