prowler-cloud/prowler

Unable to run a scan in AzureChinaCloud region

Open

#8,425 opened on Aug 1, 2025

View on GitHub
 (3 comments) (1 reaction) (1 assignee)Python (8,957 stars) (1,322 forks)batch import
ai-issue-reviewbugcan't reproducehelp wantedprovider/azureseverity/critical

Description

Steps to Reproduce

  1. Run next command: prowler azure --sp-env-auth --subscription-id 'XXXXXXXXXXXXXX' --azure-region AzureChinaCloud --verbose --log-level ERROR
  2. Failed retrieving the token to authenticate.

Full context can be found in #8208 discussion.

Expected behavior

The token is retrieved well and the scan is workig.

Actual Result with Screenshots or Logs

How did you install Prowler?

Cloning the repository from github.com (git clone)

Environment Resource

Workstation

OS used

Windows

Prowler version

5.7.5

Pip version

N/A

Context

No response

Contributor guide

Tech stack
python
Domain
securitycloud
Issue type
bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
blocked
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
mostly clear
Prerequisites
PythonAzure CLI
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
40
Research direction
The issue reports that token retrieval fails when using AzureChinaCloud region. Investigate the authentication module in Prowler for Azure (likely in the provider/azure directory). Check how the Azure credentials are obtained and whether the China cloud endpoints are properly handled. Look at related discussion in issue #8208 for more context. The fix may involve updating the authentication logic to use the correct Azure China authority URL.