Cloud Discovery & Visibility (CDV) must be authorized with the Amazon Web Services (AWS) infrastructure in order to perform discovery. If CDV is deployed on an EC2 instance, it can use the credentials for the CDV instance.
Tip: If you want to specify multiple EC2 accounts to be used in different
regions, set up a Credentials file and import it into the
Advanced tab of the Credentials
section in the AWS Setup page. For more details, see Setting up multiple AWS credentials for multiple regions.
To automatically authenticate CDV using
the credentials on the EC2 instance:
- Ensure that the EC2 instance credentials have the permissions required by CDV.
- Ensure that the IMDS (Instance Metadata Service) options are setup for the EC2 instance correctly in AWS. If using IMDSv2, make sure that the HTTP PUT response hop limit is set to 2.
- Ensure that CDV is installed in the EC2 instance.
- In CDV, go to the Discovery tab and click Create discovery.
- Select Amazon Web Services and click Next.
- Choose a setup type and click Next.
- In the Credentials tab, select the Use EC2 instance
credentials checkbox. (If this checkbox does not appear, it
indicates that one or more configuration steps were not completed correctly in
steps 1-3.)Note: The Use EC2 instance credentials checkbox appears only when the following conditions are satisfied:
- CDV is deployed on an EC2 instance in AWS. For more information about deploying CDV on an AWS EC2 instance, see Installing CDV on AWS EC2 instances.
- CDV is able to retrieve the EC2 instance metadata. For more information on configuring the EC2 instance to retrieve instance metadata, see Configure the Instance Metadata Service options on the AWS documentation portal.