CloudView User Guide September 20, 2021 Copyright 2019-2021 by Qualys, Inc. All Rights Reserved. Qualys and the Qualys logo are registered trademarks of Qualys, Inc. All other trademarks are the property of their respective owners. Qualys, Inc. 919 E Hillsdale Blvd 4th Floor Foster City, CA 94404 1 (650) 801 6100 Table of Contents About this Guide ............................................................................................... 7 About Qualys ........................................................................................................................... 7 Qualys Support ........................................................................................................................ 7 CloudView Overview ....................................................................................... 8 Qualys Subscription and Modules required ......................................................................... 8 Concepts and Terminologies .................................................................................................. 9 Get Started ....................................................................................................... 10 AWS ......................................................................................................................................... 10 Steps to Create AWS Connector .................................................................................... 10 Base Account ...................................................................................................................16 Base Account Configuration in AWS Console .............................................................. 18 Permissions for Fargate Profile ...................................................................................... 19 Create Custom Policy ...................................................................................................... 21 Editing AWS Connectors ................................................................................................ 22 AWS Resource Inventory ................................................................................................ 23 Microsoft Azure ..................................................................................................................... 25 Pre-requisites ................................................................................................................... 25 Steps to Create Azure Connector .................................................................................. 26 Configuration Steps on Microsoft Azure console ........................................................ 28 Editing Microsoft Azure Connectors ............................................................................. 36 Azure Resource Inventory .............................................................................................. 36 Google Cloud Platform ..........................................................................................................38 Steps to Create GCP Connector ..................................................................................... 38 Assign Service Account to other projects ..................................................................... 43 Editing GCP Connectors .................................................................................................. 44 GCP Resource Inventory ................................................................................................. 44 Enable-Disable Connectors .................................................................................................. 45 Disable Connector ........................................................................................................... 45 Enable Connector ............................................................................................................ 45 Managing Connector Access for Users......................................................47 User Permissions ................................................................................................................... 47 New Users: Scope and Permissions ..................................................................................... 48 Create User ...................................................................................................................... 48 Assign Role to Users ........................................................................................................ 49 Manage Access for Users (Grouping Connectors) ........................................................ 50 Manage Access for Users ................................................................................................ 52 Defining Scope for Existing Users ........................................................................................ 54 Sub User (All Privileges) ........................................................................................................ 55 Verity Confidential Sub User (Reader Privileges) ................................................................................................. 58 Securing Cloud Resources........................................................................... 60 Unified Dashboard ................................................................................................................. 60 Resources Details ................................................................................................................... 60 Instance Details ...............................................................................................................62 Vulnerability Details for Instances ............................................................................... 62 Drill down to Vulnerability Details for Instances (only for AWS) .............................. 65 View Security Group Information ................................................................................. 66 Resources Misconfigurations ................................................................................................ 68 Search Using Resource Parameter Information .......................................................... 72 Search Policy Controls .................................................................................................... 73 Exceptions .............................................................................................................................. 76 Create Exception ............................................................................................................. 76 View Exceptions .............................................................................................................. 82 Edit Exceptions? .............................................................................................................. 82 Delete exceptions? .......................................................................................................... 83 Exception History ............................................................................................................ 83 Exception Status .............................................................................................................. 83 Policies and Controls .....................................................................................85 Customize Controls ............................................................................................................... 85 Control Criticality ............................................................................................................85 System Controls .............................................................................................................. 87 User-Defined Controls .................................................................................................... 87 Copy Control and Customize ......................................................................................... 87 Build Your Own Policy ........................................................................................................... 89 System Defined Policy .................................................................................................... 89 Set Up Your Own Policy (Custom Policy) ...................................................................... 89 Policy Search .................................................................................................................... 91 Associating Controls ....................................................................................................... 91 Reports..............................................................................................................92 Assessment Reports .............................................................................................................. 92 On-Screen Reports ................................................................................................................. 95 Mandate Based Reporting ............................................................................................... 95 Policy Based Report ......................................................................................................... 99 List of Mandates ............................................................................................................ 102 Responses.......................................................................................................104 Configure Rule-based Alerts