Support for China Region

[POST] /qps/rest/2.0/create/am/awsassetdataconnector

Creates an AWS asset data connector for China regions: cn-north-1 and cn-northwest-1.

You can easily scan EC2 instances included in the AWS China region for vulnerabilities and policy compliance using the Qualys Cloud Platform. You can create/update EC2 connectors to pull instance info from the China region, activate discovered instances for the VM, PC or SCA module, and scan them using our EC2 scan workflow.

isChinaConfigured (boolean) is used to enable the China region for an EC2connector using the AWS Asset Data Connector API (awsassetdataconnector). This parameter can be set for a “create” or “update” request, and is valid only when AWS China option is enabled for your subscription.

When isChinaConfigured is set to “true”

- The connector is configured to pull instance info from the China region only.

- The connector can’t be configured with allRegions set to “true”.

Permissions required - Managers with full scope.

Sample - Create new AWS asset data connector for China regionSample - Create new AWS asset data connector for China region

API request

curl -u "USERNAME:PASSWORD" -H "Content-type: text/xml" -X "POST"
--data-binary @-
"<qualys_base_url>/qps/rest/2.0/create/am/awsassetdataconnector" < file.xml
Note: file.xml contains request POST data

Request POST data

<?xml version="1.0" encoding="UTF-8" ?>
<ServiceRequest>
    <data>
        <AwsAssetDataConnector>
            <name>cn-conn1</name>
            <arn>arn:aws:iam::205767712433:role/qualys-demo-account</arn>
            <externalId>pod13-xxxxxx-xxxxx</externalId>
            <endpoints>
                <add>
                    <AwsEndpointSimple>
                        <regionCode>cn-north-1</regionCode>
                    </AwsEndpointSimple>
                    <AwsEndpointSimple>
                        <regionCode>cn-northwest-1</regionCode>
                    </AwsEndpointSimple>
                </add>
            </endpoints>
            <isChinaConfigured>true</isChinaConfigured>
            <disabled>false</disabled>
        </AwsAssetDataConnector>
    </data>
</ServiceRequest>

Response

<?xml version="1.0" encoding="UTF-8"?>
<ServiceResponse
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="<qualys_base_url>/qps/xsd/2.0/am/aws_asset_data_connector.xsd">
    <responseCode>SUCCESS</responseCode>
    <count>1</count>
    <data>
        <AwsAssetDataConnector>
            <id>136605</id>
            <name>cn-conn1</name>
            <awsAccountId>205767712438</awsAccountId>
            <connectorState>QUEUED</connectorState>
            <type>AWS</type>
            <defaultTags>
                <list/>
            </defaultTags>
            <activation>
                <list/>
            </activation>
            <disabled>false</disabled>
            <isGovCloudConfigured>false</isGovCloudConfigured>
            <isChinaConfigured>true</isChinaConfigured>
            <arn>arn:aws:iam::205767712433:role/qualys-demo-account</arn>
            <externalId>pod13-xxxxxx-xxxxx</externalId>
            <endpoints>
                <list>
                    <AwsEndpointSimple>
                        <regionCode>cn-north-1</regionCode>
                    </AwsEndpointSimple>
                    <AwsEndpointSimple>
                        <regionCode>cn-northwest-1</regionCode>
                    </AwsEndpointSimple>
                </list>
            </endpoints>
            <allRegions>false</allRegions>
        </AwsAssetDataConnector>
    </data>
</ServiceResponse>

XSD

<platform API server>/qps/xsd/2.0/am/aws_asset_data_connector.xsd