Page Comparison

Anchor
Overview Overview

You can use the Cloud Connections screen to sync your public cloud account into the Armor Management Portal (AMP). Afterwards, you can use AMP to:

• Collect and store logs with the Log Relay add-on product

• View the security status of your instance in the Virtual Machines screen 

  Note
  While all instances from your public cloud account will appear in the Virtual Machines screen, you should only focus on the security status for the instances that contain the Armor agent.

• Add AWS Security Hub feature to your public cloud account. 

Review Cloud Connections

...

The Cloud Connections screen displays the public cloud accounts you have synced. 

...

You can use the Cloud Connections screen to sync your AWS public cloud environment with the Armor Management Portal (AMP).

To complete these instructions, you must be able to access your AWS console.

...

1. In the Armor Management Portal (AMP), in the left-side navigation, click Account. 
2. Click Cloud Connections. 
3. Click the plus ( + ) icon. 
   
   
   
   
4. In Account Name, enter a descriptive name. 
5. In Description, enter a short description. 
   
   
   
   
6. In Services, select the desired services. 
   • To have Armor send security findings to your AWS Security Hub, mark Security Hub. 
     • This action will automatically select additional services; these services must be selected. 
       
       
       
       
7. In IAM Role, copy the External ID. You will need this information at a later step. 
   • The Armor's AWS Account Number and External ID fields are pre-populated. 
   • Armor will generate an External ID for every new Cloud Connection you create. 
   • In a later step, you will locate the information to complete the IAM Role ARN field. 
     
     
     
     
8. Access the AWS console.
9. Under Security, Identity & Compliance, click IAM. 
   
   
   
   
10. In the left-side navigation, click Roles. 
11. Click Create role. 
    
    
    
    
12. Under Select role type, select Another AWS account. 
13. In Account ID, enter 679703615338. 
    
    
    
    
14. Mark Require external ID.
15. In field that appears, paste the External ID you copied earlier from the Armor Management Portal (AMP). 
    
    
    
    
16. Do not mark Require MFA.
17. Click Next: Permissions.
18. Locate and mark the SecurityAudit policy. 
19. Locate and mark the AWSSecurityHubFullAccess policy. 
    
20. Click Next: Tags. 
21. Click Next: Review. 
22. In Role name, enter a descriptive name. 
23. In Role description, enter a useful description. 
    
    
    
    
24. Click Create role. 
25. Locate and select the newly created role. 
26. Under Summary, copy the Role ARN information. 
    
    
    
    
27. Return to the Cloud Connections screen in AMP. 
28. Paste the Role ARN information into the IAM Role ARN field. 
29. Click Save Cloud Connection. 
    • Once the newly added cloud connections gathers data, the instance will appear in the Virtual Machines screen. 

...

• Post Cloud Connections
• Delete Cloud Connections
• Get Cloud Connections
• Get Cloud Connections (Status)
• Get Cloud Connections (Service Types)
  
  

...