Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update agentless-scanning-modes.adoc #429

Open
wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Update agentless-scanning-modes.adoc #429

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
55c3fb8
Update agentless-scanning-modes.adoc
jjeanclaude Feb 20, 2024
844f55f
Merge branch 'main' into patch-5
jjeanclaude Feb 29, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 11 additions & 1 deletion ...compute-edition/32/admin-guide/agentless-scanning/agentless-scanning-modes.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -43,6 +43,16 @@ For example, you don't need to replicate networking configuration across target

Scanners in the hub account scan target accounts independently. An agentless scanner in the hub account only scans snapshots from one target account and this ensures segregation between target accounts.

[NOTE]
====
For GCP accounts with organizations only: Even if the IAM permissions template successfully applies the permissions needed for the target account, they can still be overridden by Organizational policies. The permissions check that is part of the scanning mechanism will only check that the Organization project, and that the target project has the needed permissions to perform scans. If you experience permissions issues with scans, please check the IAM policy calculator in GCP, and the VPC Service Control Troubleshooter.
====

[NOTE]
====
For GCP accounts with organizations only: The target account should have its own service account associated with it. Using the same service account key with two accounts will not work properly.
====

The following diagram gives a high level view of agentless scanning in hub account mode.

image::agentless-scanning-hub-account-mode.png[width=800]
Expand Down Expand Up @@ -82,4 +92,4 @@ You can still correlate the costs each target account incurs using CSPs costs an
This is the default mode to help you get started as soon as you complete onboarding.
|Additional configuration required for each account after you complete onboarding your accounts.

|===
|===
Loading