Connect an Alibaba Cloud account using CloudShell

Procedure

1. Sign in to the Trend Vision One console.
2. In a new tab in the same browser session, sign in to the Alibaba Cloud account you want to connect and access the Cloud Shell.
3. In the Trend Vision One console, go to Cloud Security → Cloud Accounts → Alibaba Cloud.
4. Click Add Account.
   The Add Alibaba Cloud Account screen appears.
5. Specify a Name for the account which appears in the Cloud Accounts list.
6. Specify a Description to help identify the purpose of the connection.
7. Select the Region for resource deployment.

   Important You must deploy the Terraform script to the region you selected. Deploying to a different region might cause the connection to fail.

8. If you have more than one Server & Workload Protection Manager instance, select the instance to associate with the connected account.

   Note If you only have one Server & Workload Protection Manager instance, the account is automatically associated with that instance.

9. Configure the Features and Permissions you want to grant access to your cloud environment.
   • Core Features and Cyber Risk Exposure Management: Connect your Alibaba Cloud account to Trend Vision One to discover your cloud assets and rapidly identify risks such as compliance and security best practice violations on your cloud infrastructure.
   • Cyber Risk Exposure Management - Cloud account assessment: Discover and assess your cloud assets in Attack Surface Discovery, Threat and Exposure Management, and Cloud Security Posture.

     Note This feature requires credits, which are calculated based on asset count after onboarding the Alibaba Cloud account.

   • Agentless Vulnerability & Threat Detection: This feature set is not available for CloudShell deployments. To deploy Agentless Vulnerability & Threat Detection, you must select LocalShell deployment. For more information, see Connect an Alibaba Cloud account using LocalShell.

   For more information about each feature and permission set, see Alibaba Cloud features and permissions.
10. Click Next.
11. Select CloudShell Deployment.
12. Click Download and Review Template to download the template package.
    The package name is cloud-account-management-terraform-package-[number].zip where the [number] element is a randomly generated number. The randomly generated number ensures the Terraform template is extracted to a unique folder with no other Terraform files.
13. In your Alibaba Cloud Shell, upload the Terraform package.
14. Access the command line interface and extract the template package.
    Copy the command or type unzip cloud-account-management-terraform-package-[number].zip. If you are manually typing the command, make sure [number] matches the file name of the package you downloaded.
15. Access the extracted folder.
    Copy the command or type cd cloud-account-management-terraform-package-[number].zip.
16. If this is your first time connecting an account in the selected region, run the back-end script.
    Copy the command or type bash script.sh create_backend.
17. Run the deployment script.
    Copy the command or type bash script.sh install.

    Important The resource creation script must be the only terraform file in the directory. Having more than one terraform file in the folder interferes with deployment process and might cause the connection to fail.

18. In the Trend Vision One console, in the Connect Alibaba Cloud Account screen, click Done.

    Note If the Done button is not enabled, make sure you have copied the command line for each step on the screen.

    The connection process might take a few moments to complete. Refresh the Cloud Accounts screen to check the status of your added account.