Add a cloud provider for a CloudPoint server
You can protect the assets on the Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure, and Microsoft Azure Stack Hub cloud providers. Starting with 9.0, the CloudPoint server can discover Amazon Web Services and Microsoft Azure US Government cloud workloads.
To add a cloud provider for CloudPoint server
- On the left, click Cloud.
- Click the Providers tab or click Add under the cloud provider for which you want to add a configuration.
- Enter a value in the Configuration Name field, in the Add configuration pane.
- Select the preferred CloudPoint server.
- Enter the required details.
Cloud provider
Parameter
Description
Microsoft Azure
Tenant ID
The ID of the AAD directory in which you created the application.
Client ID
The application ID.
Secret Key
The secret key of the application.
Regions
One or more regions in which to discover cloud assets.
Note:
If you configure a government cloud, select US Gov Arizona, US Gov Texas US, or Gov Virginia.
Resource Group prefix
The string with which you want to append all the resources in a resource group.
Protect assets even if prefixed Resource Groups are not found
The check box determines whether the assets are protected if they are not associated to any resource groups.
Microsoft Azure Stack Hub
Using AAD:
Azure Stack Hub Resource Manager endpoint URL
The endpoint URL in the following format, that allows CloudPoint to connect with your Azure resources.
https://management.<location>.<FQDN>Tenant ID
The ID of the AAD directory in which you created the application.
Client ID
The application ID.
Secret Key
The secret key of the application.
Authentication Resource URL (optional)
The URL where the authentication token is sent to.
Using ADFS:
Azure Stack Hub Resource Manager endpoint URL
The endpoint URL in the following format, that allows CloudPoint to connect with your Azure resources.
https://management.<location>.<FQDN>User Name
User name that was provided during installation for the AzureStackAdmin domain administrator account, in the following format:
<Azure Stack Hub domain>\<cloud admin user name>Password
The password that was provided during installation for the AzureStackAdmin domain administrator account
Authentication Resource URL (optional)
The URL where the authentication token is sent to.
Amazon AWS
Note:
If the CloudPoint server is configured with IAM Config, the Access Key and Secret Key options are not available.
Access Key
The access key ID, when specified with the secret access key, authorizes CloudPoint to interact with the AWS APIs.
Secret Key
The secret key of the application.
Regions
One or more AWS regions in which to discover cloud assets.
Note:
If you configure a government cloud, select us-gov-east-1 or us-gov-west-1.
Google Cloud Platform
Project ID
The ID of the project from which the resources are managed. Listed as in the project_id JSON file.
Client Email
The email address of the Client ID. Listed as client_email in the JSON file.
Private Key
The private key. Listed as private_key in the JSON file.
Note:
You must enter this key without quotes. Do not enter any spaces or return characters at the beginning or end of the key.
Zones
A list of zones in which the provider operates.
- Enter the connection and authentication details in the Add Configuration pane.
- Click Save.
The assets on the cloud providers are automatically discovered.