Cloud Accounts

Use the account overviews to:

• Confirm that the incoming data sources you expected are present.
• Get an overview of the status.

Access Cloud Accounts

Log in to Sysdig Secure, select Integrations > Cloud Accounts, and choose:

• AWS
• GCP
• Azure

On each page, you can review details or connect an additional account.

Add AWS Accounts

To connect an account, select + Add AWS Account, and follow the instructions in the installation pop-up wizard.

For detailed onboarding instructions, see Connect Cloud Account | AWS.

Review AWS Cloud Accounts

The page lists:

• Account: AWS Account ID, followed by an Account Alias if one was assigned

• Status: The Status of each AWS Account you have connected.

  • Possible values: Connected, Pending, Partial Error, Error, Unknown. For more on status values, see Validate Account Connection.

• Last Checked: Time at which a feature was last validated. Validation occurs every 24 hours.

• Org ID: ID of the Organization to which the Account belongs, if applicable.

• Added On: Date the Account was added to Sysdig Secure.

Validate Account Connection

There are two types integration status displayed, Feature level status, and Account level status. Statuses are validated approximately every 24 hours, with the first check occurring within an hour of enabling a feature.

Feature Status

When you connect a cloud account to Sysdig Secure, select the Sysdig features you would like to enable, such as Cloud Security Posture Management (CSPM), Cloud Infrastructure Entitlements Management (CIEM), Cloud Detection and Reponse (CDR) and Vulnerability Host Scanning. Features you’ve enabled will appear in the detail panel that opens when you select a row, where you can also see Feature connection status.

The possible Feature statuses are:

Account Status

The Account level status appears in the main table, as well as at the top of the details panel. This status is an aggregate of the Feature statuses present in the Account.

The possible Account statuses are:

Add Azure Accounts

To connect an account, select + Add Azure Account, and then follow the installation pop-up wizard.

For detailed onboarding instructions, see Connect Cloud Account | Azure.

Review Azure Cloud Accounts

The page lists:

• Subscription: Azure Subscription ID, followed by an Subscription Name, if one was assigned.

• Status: The Status of each Azure Subscription connected.

  • Possible values: Connected, Pending, Partial Error, Error, Unknown. For more on status values, see Validate Account Connection.

• Last Checked: Time at which a feature was last validated. Validation occurs every 24 hours.

• Tenant ID: ID of the Organization to which the Subscription belongs, if applicable.

• Added On: Date the Subscription was added to Sysdig Secure.

Validate Account Connection

There are two types integration status displayed, Feature level status, and Subscription level status. Statuses are validated approximately every 24 hours, with the first check occurring within an hour of enabling a feature.

Feature Status

When you connect a cloud account to Sysdig Secure, select the Sysdig features you would like to enable, such as Cloud Security Posture Management (CSPM), Cloud Infrastructure Entitlements Management (CIEM), Cloud Detection and Reponse (CDR) and Vulnerability Host Scanning. Features you’ve enabled will appear in the detail panel that opens when you select a row, where you can also see Feature connection status.

The possible Feature statuses are:

Subscription Status

The Subscription level status appears in the main table, as well as at the top of the details panel. This status is an aggregate of the Feature statuses present in the subscription.

The possible Subscription statuses are:

Add GCP Account

To connect a project, select + Add GCP Account, and then follow the installation pop-up wizard.

For detailed onboarding instructions, see Connect Cloud Account | GCP.

Review GCP Cloud Accounts

The page lists:

• Project: GCP Project ID, followed by a Project Name (if assigned).

• Status: The status of each GCP Project connected.

  • Possible values: Connected, Pending, Partial Error, Error, Unknown. For more on status values, see Validate Account Connection.

• Last Checked: Time at which a feature was last validated (updated every 24 hours)

• Org Domain: ID of the Organization to which the Project belongs, if applicable

• Added On: Date the Project was added to Sysdig Secure

Validate Account Connection

The integration statuses displayed are: Feature level status, and Project level status. Status checks are run approximately every 24 hours, with the first check occurring within an hour of enabling a feature.

Feature Status

When you connect a cloud account to Sysdig Secure, select the Sysdig features you want to enable, such as Cloud Security Posture Management (CSPM), Cloud Infrastructure Entitlements Management (CIEM), Cloud Detection and Reponse (CDR) and Vulnerability Host Scanning. Features you’ve enabled will appear in the detail panel that opens when you select a row, where you can also see Feature connection status.

The possible Feature statuses are:

Subscription Status

The Project level status appears in the main table, as well as at the top of the details panel. This status is an aggregate of the Feature statuses present in the Project.

The possible Project statuses are:

Detect all GCP Instances

Optional: Use a script to detect all GCP instances of projects across your entire GCP organization. This information can help you count all the places you want to install an agent in tandem with the Sysdig Agents overview page.

Run this script to print out the number of instances in the project, and download a CSV file with the information:

echo "id,name,machine_type" > gcloud.csv
for PROJECT in $(gcloud projects list --format="value(projectId)")
do
  gcloud compute instances list --project $PROJECT --format="csv(
    id,
    name,
    machineType
  )" --quiet 2> /dev/null | grep -v "id,name" >> gcloud.csv
done
echo "Count of instances in all projects: $(cat gcloud.csv | tail -n +2| wc -l)"

The terminal entry displays the count similar to the following:

Count of instances in all projects:       21