Auto-Deploy: AWS
Use automatic deployment to have the toolkit provision the replacement scanner instance on AWS for you as part of the replacement.
To deploy the replacement scanner instance on AWS automatically:
- Select Amazon Web Services (AWS) as the target platform.
- Check Deploy for me.
- Complete the deployment form, described in the following tables.
Deployment Target
Specify the AWS region and AMI source:
|
Field |
Description |
|---|---|
|
Cloud Region |
AWS region, for example us-east-1. |
|
AMI Source |
AWS Marketplace to auto-discover the latest Qualys AMI, or Custom/Account AMI to specify an AMI ID. |
|
Marketplace AMI Override |
Optionally pin a specific AMI ID. Leave blank to use auto-discovery. |
|
Custom AMI ID |
Required if you selected Custom AMI as the source, for example ami-0123456789abcdef0. |
|
Subnet ID |
Existing subnet ID, for example subnet-abc123. |
|
Security Group IDs |
Existing security group ID. If left blank, the toolkit creates a new security group that allows outbound HTTPS (port 443) only. |
|
Key Pair Name |
SSH key pair name. Optional. |
Instance Sizing
For EC2 instance type and sizing recommendations, see Qualys Scanner Appliance Sizing.
AWS Credentials
Provide the AWS credentials the toolkit uses to provision the instance:
|
Field |
Description |
|---|---|
|
Access Key ID |
AWS access key ID. |
|
Secret Access Key |
AWS secret access key. |
|
Session Token |
Optional. Use for temporary credentials issued by AWS STS. |
AWS credentials are used only for the current deployment session and are not stored. As an alternative, you can set AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY as environment variables on the host running the toolkit.
Deployment Options
The following table lists optional deployment settings:
|
Field |
Description |
|---|---|
|
Public IP Assignment |
Assign a public IPv4 address to the instance. |
|
Ignore AMI Changes |
Lock the AMI ID after creation, so the instance is not replaced automatically when a newer AMI becomes available. |
How It Works
The toolkit uses Terraform to provision the EC2 instance with the AMI, sizing, network, and activation code you specified, creating a security group if one was not provided. It runs the deployment in a temporary workspace and cleans up automatically once the instance is provisioned.
If you use marketplace AMI auto-discovery, first subscribe to the Qualys Virtual Scanner Appliance on AWS Marketplace. The toolkit searches for the latest qVSA AMI in your selected region.