Cloudview Connector for GCP

License

THIS SCRIPT IS PROVIDED TO YOU "AS IS." TO THE EXTENT PERMITTED BY LAW, QUALYS HEREBY DISCLAIMS ALL WARRANTIES AND LIABILITY FOR THE PROVISION OR USE OF THIS SCRIPT. IN NO EVENT SHALL THESE SCRIPTS BE DEEMED TO BE CLOUD SERVICES AS PROVIDED BY QUALYS

Description

The aim of this repository is to build a solution which will help you onboard multiple projects or all projects within an organization to Qualys CloudView. We have built a python program which will perform this solution.

This repository contains ==>

1. Main python program
2. Configuration file
3. CSV with list of projectids
4. Demo key

Deployment Options

• An Organization : To onboard all the projects in an organization

  • Input "all" in the projects field of configuration file

• Multiple Projects within an organization : To onboard selected projects within an organization

  • Input the complete path of CSV file containing the list of projects to be onboarded in the projects field of configuration file

  Prerequisites:(A service account with required roles) (An example)

   1. Enable access to few API's in API library for project: 
         * For all projects to be onboarded, navigate to API & Services > Library and enable Cloud Resource Manager API, Compute Engine API, Kubernetes Engine API and Cloud SQL Admin API from the API library. 
  
   2. Create a service account in any project and download a configuration file: 
         * Navigate to IAM & admin > Service accounts and click CREATE SERVICE ACCOUNT. Provide a name and description (optional) for the service account and click CREATE. 
         * Click CREATE KEY.  Select JSON as Key type and click CREATE. A message saying “Private key saved to your computer” is displayed and the JSON file is downloaded to your computer. Click CLOSE and then click DONE. 
  
   3. Attach role (Resource Manager -> Organization Viewer, Folder Viewer, Project Viewer and    IAM -> Security Reviewer) to the Service account created in step1: 
         * Navigate to Organization 
         * Navigate to IAM & admin > IAM 
         * Click on ADD tab 
         * Paste the service account email address in the New member field 
         * Add roles mentioned above in the Role field and click on CONTINUE 
  

Usage

Get started

• Making the choice of deployment mode All Projects in an organization or Multiple Projects within the organization

• Preparing the configuration file (An example)

  • username: "Qualys username to call CloudView API"
  • password: "Qualys password to call CloudView API"
  • apiURL: "Qualys baseurl for CloudView API"
  • keyfile: "The configuration/key file downloaded for the service account "
  • projects: "Either the CSV containing list of projectIds or all"
  • debug: true/false

• Preparing the csv file if deployment mode is not all the projects in an organization (An example)

  ProjectId
  project1
  project2

• Run the main python program