Deploy Qualys Cloud Agent via Run command to AWS managed instances using SSM Documents

THIS SCRIPT IS PROVIDED TO YOU "AS IS." TO THE EXTENT PERMITTED BY LAW, QUALYS HEREBY DISCLAIMS ALL WARRANTIES AND LIABILITY FOR THE PROVISION OR USE OF THIS SCRIPT. IN NO EVENT SHALL THESE SCRIPTS BE DEEMED TO BE CLOUD SERVICES AS PROVIDED BY QUALYS

Follow the steps mentioned below to utilize the document to install Qualys Cloud Agent.

1. Open the AWS Systems Manager console.

2. In the navigation pane under Systems Manager Services, choose Run Command.

3. For Command document, search with Owner : Equal : Public and then choose the document QualysCloudAgent-Install with search string Document name prefix : Equal : QualysCloudAgent-Install.

4. This document will open a form which you need to fill for installing the Cloud Agent. There are two required options which you must provide.

ActivationID: An ID to authenticate agents so that they could be grouped and bind to your account

CustomerID: An ID to identify your account.

WebServiceUri: Specify the WebServiceUri for Windows Cloud Agent after version 4.3, for versions prior 4.3, remove the reference to WebServiceUri on line 190 of qualys-deploy-ssm.txt "WebServiceUri={{ WebServiceUri }}" -- Format of WebServiceUri is <platform_url>/CloudAgent/ and platform_url can be found at https://www.qualys.com/platform-identification/ under Cloud Agent section

Note: The same document can be used to install Qualys Cloud Agent on Windows and Debian or RPM based Linux instances.

5. Specify your EC2 instances either by choosing the Specifying a Tag option or by choosing Manually Selecting Instances option and then selecting Select instances.

6. Provide your choices for the rest of the available options using the instructions in Executing Commands from the EC2 Console, and then select Run.

The SSM Document is tested on following Operating systems:

• Amazon Linux 2

• CentOS Linux 7.5.1804 (Core)

• Red Hat Enterprise Linux Server 7.5

• Ubuntu Linux 14.04.5

• Microsoft Windows Server 2012 and their service packs

Note:To utilize this option, make sure that your EC2 instance has the SSM Agent installed and has an IAM role that allows Run Command. For more information, refer the below links:

• Installing and Configuring SSM Agent
• Configuring Security Roles for System Manager