Cloud Services

Tenable Vulnerability Management can authenticate a scan using accounts in the cloud services listed below.

Note: Some credential types may not be available for configuration, depending on the scan template you selected.
Option Default Value Description Required

AWS Access Key IDS

 –

The AWS access key ID string.

 yes

AWS Secret Key

 –

AWS secret key that provides the authentication for AWS Access Key ID.

 yes
Scan-wide Credential Type Settings

Regions to access

Rest of the World

In order for Tenable Vulnerability Management to audit an Amazon AWS account, you must define the regions you want to scan. Per Amazon policy, you need different credentials to audit account configuration for the China region than you do for the rest of the world.

Possible regions include:

  • GovCloud — If you select this region, you automatically select the government cloud (e.g., us-gov-west-1).

  • Rest of the World — If you select this region, the following additional options appear:

    • us-east-1

    • us-east-2

    • us-west-1

    • us-west-2

    • ca-central-1

    • eu-west-1

    • eu-west-2

    • eu-central-1

    • ap-northeast-1

    • ap-northeast-2

    • ap-southeast-1

    • ap-southeast-2

    • sa-east-1

  • China — If you select this region, the following additional options appear:

    • cn-north-1

    • cn-northwest-1

 yes

HTTPS

Enabled

Whether Tenable Vulnerability Management authenticates over an encrypted (HTTPS) or an unencrypted (HTTP) connection.

 no

Verify SSL Certificate

Enabled

Whether Tenable Vulnerability Management verifies the validity of the SSL digital certificate.

 no
Option Default Value Description Required
Username – Username required to log in to Microsoft Azure. yes
Password – Password associated with the username. yes
Client Id – The application ID (also known as client ID) for your registered application. yes
Scan-wide Credential Type Settings
Subscription IDs –

List subscription IDs to scan, separated by a comma. If this field is blank, all subscriptions are audited.

 no
Option Default Value Description Required

Username

 –

Username to log in.

 yes

Password or API Key

 –

Password or API key associated with the username.

 yes

Authentication Method

 API-Key

Select Password or API-Key from the drop-down box.

 yes

Scan-wide Credential Type Settings

 all locations selected

Location of the Rackspace Cloud instance. Possible locations include:

  • Dallas-Fort Worth (DFW)
  • Chicago (ORD)
  • Northern Virginia (IAD)
  • London (LON)
  • Syndney (SYD)
  • Hong Kong (HKG)
 no
Option Default Value Description Required

Username

 –

Username required to log in to Salesforce.com

 yes

Password

 –

Password associated with the Salesforce.com username

 yes