Zadara zCompute

Zadara zCompute is a cloud compute platform that provides virtual machines, block and object storage, virtual networking, and machine images for building private and hybrid cloud infrastructure.

Use Cases the Adapter Solves

• Monitor compute inventory: View zCompute instances and their network information alongside other devices in Axonius.
• Track cloud storage resources: Review zCompute disks and their status to support cloud asset governance.
• Review cloud network controls: Identify zCompute firewall security groups and their inbound and outbound rules.

Asset Types Fetched

• Devices
• Compute Images
• Disks
• Firewalls

Data Retrieved through the Adapter

Devices - fields such as: Cloud ID, Name, Image ID, Network Interfaces

Compute Images - fields such as: Cloud ID, Name, Description, State

Disks - fields such as: Cloud ID, Size, State, Encrypted

Firewalls - fields such as: Cloud ID, Name, Description, VPC ID

Before You Begin

Required Ports

• TCP port 443 (HTTPS).

Authentication Methods

The adapter uses AWS Signature Version 4 authentication with an access key and secret key. It signs requests for the EC2 service.

APIs

Axonius uses the Zadara zCompute API. The following operations are called:

• POST /api/v2/aws/ec2 with Action=DescribeInstances - Retrieves instances.
• POST /api/v2/aws/ec2 with Action=DescribeAddresses - Retrieves addresses associated with instances.
• POST /api/v2/aws/ec2 with Action=DescribeImages - Retrieves compute images.
• POST /api/v2/aws/ec2 with Action=DescribeVolumes - Retrieves disks.
• POST /api/v2/aws/ec2 with Action=DescribeSecurityGroups - Retrieves firewall security groups.

Required Permissions

The Zadara zCompute adapter connects to the zCompute AWS-compatible EC2 API using an access key and secret key (AWS Signature Version 4). The user that owns the access key must have read access to the following resources in the zCompute project: instances, Elastic IP addresses, images, volumes, and security groups.

Assign the user one of the following AWS IAM policies:

• EC2ManageInstances (Zadara-managed policy). Grants ec2:Describe*, which covers all the actions the adapter uses. This policy also allows starting and stopping instances, which the adapter doesn't require.
• AmazonEC2ReadOnlyAccess (AWS-managed policy supported by Zadara). Grants read-only access to EC2 resources.

To limit access to the minimum, create a custom policy that allows only the following actions:

• ec2:DescribeInstances
• ec2:DescribeAddresses
• ec2:DescribeImages
• ec2:DescribeVolumes
• ec2:DescribeSecurityGroups

For more information, see AWS IAM policies in the Zadara zCompute User Guide.

Supported From Version

Supported from Axonius version 9.0.8

Connecting the Adapter in Axonius

1. Navigate to the Adapter Catalog, search for Zadara zCompute, and select the adapter.
2. Click Add Connection.
3. Provide the following parameters.

Required Parameters

1. Cluster URL - The base URL of the zCompute cluster. Example: https://mycluster.zadara.com
2. Access Key ID - The access key used to sign requests to the zCompute API.
3. Secret Access Key - The secret access key used to sign requests to the zCompute API.

Optional Parameters

1. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
2. HTTPS Proxy - Connect the adapter to a proxy instead of directly connecting it to the cluster URL.
3. HTTPS Proxy User Name - The user name to use when connecting to the cluster URL through the HTTPS proxy.
4. HTTPS Proxy Password - The password to use when connecting through the HTTPS proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.