China Cloud Overview & Support

📘

New AWS Onboarding

As of InsightCloudSec version 23.4.11, a new AWS onboarding experience is available. This experience will replace the old setup experience and you will not be able to access it. Review AWS - Onboarding for more details on the new experience.

As usual, if you have issues or need support reach out to us through the Customer Support Portal with any questions.

After InsightCloudSec is successfully installed, you're ready to start harvesting resources from your target cloud accounts. This documentation combines information for configuring your China Cloud environment(s) to "talk" with InsightCloudSec securely. Review the sections below to determine the best starting point for your environment.

What does InsightCloudSec support for China Clouds?

Review the full list of China-specific supported services on the China Cloud Support Reference page.

How do I start seeing my China environment(s) in InsightCloudSec?

InsightCloudSec relies on a process called "harvesting" to pull data from various CSPs. Currently, InsightCloudSec only offers onboarding for an individual cloud account in AWS China via our universal onboarding experience.

Can customers running InsightCloudSec in China Cloud (self-hosted) harvest commercial account data/resources?

AWS China

Yes, however, customers must use an STS assume role operation instead of a traditional assume role. API calls cannot be made between AWS partitions (commercial/GovCloud/China) until a cross-partition STS assume role operation has been performed.

Can customers running InsightCloudSec in commercial cloud environments (SaaS and self-hosted) harvest China Cloud account data/resources?

AWS China

Yes, however, customers must use a STS assume role operation instead of a traditional assume role. API calls cannot be made between AWS partitions (commercial/GovCloud/China) until a cross-partition STS assume role operation has been performed.