This repo is no longer supported - please use https://github.com/Qualys/aws-cv-connector-cf

aws-cv-connector-cf

License

THIS SCRIPT IS PROVIDED TO YOU "AS IS." TO THE EXTENT PERMITTED BY LAW, QUALYS HEREBY DISCLAIMS ALL WARRANTIES AND LIABILITY FOR THE PROVISION OR USE OF THIS SCRIPT. IN NO EVENT SHALL THESE SCRIPTS BE DEEMED TO BE CLOUD SERVICES AS PROVIDED BY QUALYS

Summary

CloudFormation Template to create a Qualys CloudView AWS Connector, AssetView AWS Connector, and associated cross-account trust role using the Security Audit managed policy.

To run the script you will need:

1. to supply credentials for the Qualys user name and password

2. Qualys CloudView API endpoint URL for your Qulays Platform

3. Qualys AssetView API endpoint URL for your Qulays Platform

This CloudFormation Template is intended to be run in your AWS accounts or as part of your AWS Account provisioning process to create an associated Qualys CloudView and AssetView Connectors. An example of storing the Qualys API user name and password in AWS Secrets Manager is available in the branch for https://github.com/snicholson-qualys/aws-cv-connector-cf/tree/aws_secrets_mgr but is not included in this example that creates both connectors in one CloudFormation Template.

Parameters:

UserName:

Default: {supply_Qualys_user_name}

...

Password:

Default: {supply_Qualys_user_password}

BaseUrl:

Default: Qualys API URL for CloudView API endpoint. See https://www.qualys.com/docs/qualys-cloud-view-user-guide.pdf page 27    

PortalBaseUrl:

Default: Qualys API URL for AssetView API endpoint. See https://www.qualys.com/docs/qualys-asset-management-tagging-api-v2-user-guide.pdf page 8

External ID

You can specify a unique External ID consisting of 9-90 numeric characters in place of Empty on line 23 or if one is not supplied, the Lambda function will generate one and use that for the unique External ID.

Parameters:

...

ExternalId:

Default: Empty

Description: Specify a unique number from 9-90 digits, or one will be generated for you

Type: String

Add AssetView Connector

Choose whether to add the AssetView Connector. Select the dropdown for the variable AssetViewConnector to true or false. Selecting true (default value) will create the AssetView AWS Connector. The Connector will be created in inventory mode only and will not have any activated Qualys modules. Select false will only create the CloudView AWS Connector.

Role Name

If you want to change the Role name you can edit these settings in line number 27

Parameters:

...

RoleName:

Default: CF-QualysAWSConnectorRole