China Cloud Overview & Support

Getting Started with China-based Cloud Services and InsightCloudSec

After InsightCloudSec is successfully installed, you're ready to start harvesting resources from your target cloud accounts. This documentation combines information for configuring your China Cloud environment(s) to "talk" with InsightCloudSec securely. Review the sections below to determine the best starting point for your environment.

What does InsightCloudSec support for China Clouds?

Review the full list of China-specific supported services on the China Cloud Support Reference page.

How do I start seeing my China environment(s) in InsightCloudSec?

InsightCloudSec relies on a process called "harvesting" to pull data from various CSPs. Currently, InsightCloudSec only offers setup instructions for a single cloud account in AWS China:

Note: Both SaaS and self-hosted customers can use the above instructions.

Can customers running InsightCloudSec in China Cloud (self-hosted) harvest commercial account data/resources?

AWS China

Yes, however, customers must use an STS assume role operation instead of a traditional assume role. API calls cannot be made between AWS partitions (commercial/GovCloud/China) until a cross-partition STS assume role operation has been performed.

Note: The AWS China Setup instructions use an STS Assume Role.

Can customers running InsightCloudSec in commercial cloud environments (SaaS and self-hosted) harvest China Cloud account data/resources?

AWS China

Yes, however, customers must use a STS assume role operation instead of a traditional assume role. API calls cannot be made between AWS partitions (commercial/GovCloud/China) until a cross-partition STS assume role operation has been performed.

Note: The AWS China Setup instructions use an STS Assume Role.