Question 1

Which Azure services does Ana support?

Accepted Answer

Any Azure service reachable through the Azure Resource Manager API, subject to the service principal's RBAC assignments. Common services include Monitor, Cost Management, Compute, SQL, Storage, Functions, and Kubernetes Service. Admins control access through Azure RBAC.

Question 2

Can I use managed identity?

Accepted Answer

Yes. For the cleanest security posture, configure the connector to use a managed identity rather than service principal secrets. This eliminates credential storage risk and ties authentication to the Azure platform directly with full Activity Log traceability.

Question 3

How are Azure credentials stored?

Accepted Answer

Service principal client secrets and certificates are encrypted in TextQL's credential vault and injected at the network layer by our egress proxy. Ana's Python sandbox never sees the raw values. Token refresh happens transparently outside the sandbox.

Question 4

Is Activity Log integration available?

Accepted Answer

Yes. Because Ana calls standard Azure Resource Manager endpoints, every action is captured in your Azure Activity Log. You get a unified audit trail across TextQL and the rest of your Azure environment without any extra configuration needed.

Question 5

Which Azure clouds are supported?

Accepted Answer

All Azure public and sovereign clouds including Azure Commercial, Azure Government, and Azure China. For sovereign clouds, admins whitelist the corresponding management endpoint domains in the TextQL admin console. Credential handling is identical across clouds.