Install a CWPP Agent using AWS SSM
After the POP deployment is completed successfully and all the services are installed properly you can deploy the CWPP agent on an autoscaling instance or an EC2 instance created in the proper region.
Before installation, verify the following:
-
Validate the options provided to the installation script
-
Check permission for Installation, Space requirements, and Platform support
-
DXL (Data eXchange Layer) Configuration files are downloaded from the CICD (Continuous Integration and Continuous Delivery) Service that the Installer Binary will use to communicate with the DXL Broker hosted in the POP.
-
Installer binary is downloaded from the CICD Service and executed.
-
Logs are saved locally and showed on the console and sent to the CICD Service.
Once the agent deployment is successful, validate if the same is reported to the POP in Skyhigh CASB in the Resources tab
To install a CSPP Agent using AWS SSM:
- In the AWS console, select the AWS region where the POP is installed.
- Go to AWS Systems Manager > Documents.
- At the top of the console, select Create command or session. This allows you to create your own document in either JSON or YAML. Compile the agent install script in JSON or YAML.
- Replace the JSON contents with the contents from the attached document, CWPAgentSSMDocumentContent.json.
- Click Create new version.
- From the client configuration package, copy the DevOpsConfig.tar to the AWS S3 location. Then enter the location under Command parameters in the S3 Path.
- Choose Run Command. Specify the Target resources by selecting from three methods and Run the command.
After the SSM is completed, you can see that the instance is reported in Skyhigh CASB in Analytics > Resources as Managed.