THIS SCRIPT IS PROVIDED TO YOU "AS IS." TO THE EXTENT PERMITTED BY LAW, QUALYS HEREBY DISCLAIMS ALL WARRANTIES AND LIABILITY FOR THE PROVISION OR USE OF THIS SCRIPT. IN NO EVENT SHALL THESE SCRIPTS BE DEEMED TO BE CLOUD SERVICES AS PROVIDED BY QUALYS
CloudFormation Template to create a Qualys CloudView AWS Connector, AssetView AWS Connector, and associated cross-account trust role using the Security Audit managed policy.
To run the script you will need:
-
to supply credentials for the Qualys user name and password
-
Qualys CloudView API endpoint URL for your Qulays Platform
-
Qualys AssetView API endpoint URL for your Qulays Platform
This CloudFormation Template is intended to be run in your AWS accounts or as part of your AWS Account provisioning process to create an associated Qualys CloudView and AssetView Connectors. An example of storing the Qualys API user name and password in AWS Secrets Manager is available in the branch for https://github.com/snicholson-qualys/aws-cv-connector-cf/tree/aws_secrets_mgr but is not included in this example that creates both connectors in one CloudFormation Template.
UserName:
Default: {supply_Qualys_user_name}
...
Password:
Default: {supply_Qualys_user_password}
BaseUrl:
Default: Qualys API URL for CloudView API endpoint. See https://www.qualys.com/docs/qualys-cloud-view-user-guide.pdf page 27
PortalBaseUrl:
Default: Qualys API URL for AssetView API endpoint. See https://www.qualys.com/docs/qualys-asset-management-tagging-api-v2-user-guide.pdf page 8
BaseAccountId:
Default: Qualys AWS ID
You must specify an External ID using the new format of PodID-CustomerId-{random_string_between_1_and_512_characters}. You can obtain the values for PodId and CustomerId from your CloudView subscription under 'Create AWS Connector'. The random number generation part of this script will not successfully create a connector, this script will be updated when the API endpoint is available for requesting the non-editable portion of your External ID.
Parameters:
...
ExternalId:
Default: Empty
Description: Specify an External ID using the new format of PodID-CustomerId-{random_string_between_1_and_512_characters}
Type: String
Eample Value: US2-000000-1234567890123
Choose whether to add the AssetView Connector. Select the dropdown for the variable AssetViewConnector to true or false. Selecting true (default value) will create the AssetView AWS Connector. The Connector will be created in inventory mode only and will not have any activated Qualys modules. Select false will only create the CloudView AWS Connector.
If you want to change the Role name you can edit these settings in line number 27
Parameters:
...
RoleName:
Default: CF-QualysAWSConnectorRole