CloudGraph Tencent Provider
Use the CloudGraph Tencent Provider to scan and normalize cloud infrastructure using the Tencent Cloud SDK
Install
Install the Tencent provider in CloudGraph
cg init tencent
Authentication
Authenticate the CloudGraph Tencent Provider using one or more SecretId/SecretKey pair(s). Visit the TencentCloud API Key page to apply for security credentials:
Configuration
CloudGraph creates a configuration file at:
- UNIX:
~/.config/cloudgraph/.cloud-graphrc.json - Windows:
%LOCALAPPDATA%\cloudgraph/.cloud-graphrc.json
NOTE: CloudGraph will output where it stores the configuration file and provider data as part of the cg init command
CloudGraph will generate this configuration file when you run cg init tencent. You may update it manually or by running cg init tencent again.
"tencent": {
"accounts": [
{
"secretId": "AKIDz8krbsJ5yKBZQpn74WFkmLPx3*******",
"secretKey": "Gu5t9xGARNpq86cd98joQYCN3*******"
}
],
"regions": "ap-bangkok,ap-jakarta,ap-beijing,ap-chengdu,ap-chongqing,ap-guangzhou,ap-shenzhen-fsi,ap-hongkong,ap-mumbai,ap-nanjing,ap-seoul,ap-tokyo,ap-shanghai,ap-shanghai-fsi,ap-singapore,eu-frankfurt,eu-moscow,na-ashburn,na-siliconvalley,na-toronto,sa-saopaulo",
"resources": "subnet,vpc"
}
CloudGraph Tencent Provider will ask you what regions you would like to crawl and will by default crawl for all supported resources in selected regions in the default account. You can update the regions or resources fields in the cloud-graphrc.json file to change this behavior. You can also select which resources to crawl in the cg init tencent command by passing the the -r flag: cg init tencent -r
Supported Services
| Service | Relations |
|---|---|
| camGroup | |
| camPolicy | |
| camUser | |
| ccn | ccnAttachment |
| ccnAttachment | ccn |
| customerGateway | vpnConnection |
| networkAcl | subnet, vpc |
| routeTable | vpc, subnet |
| securityGroup | |
| securityGroupRule | |
| subnet | kubernetesEngine, networkAcl, vpc, routeTable |
| vpc | kubernetesEngine, networkAcl, subnet, vpnGateway, routeTable, vpnConnection |
| vpnConnection | vpc, vpnGateway, customerGateway |
| vpnGateway | vpc, vpnGatewayRoute, vpnConnection |
| vpnGatewayRoute | vpnGateway |
| kubernetesEngine | subnet, vpc |