Reference Guide
...
Cloud PAM
Importing Devices from Amazon ...

Configuring Element Types

3min

It is necessary to define a new Element Type for each OS type, for Kron PAM to be able to auto-detect. Ex: CentOS Linux, Ubuntu Linux, etc.

Follow the steps below to import AWS devices, having a specific OS created for each specific Element Type for that OS (The example below applies to CentOS).

  1. Navigate to Devices> Element Type.
  2. Create a New Element Type.
  3. Add AWS tag.
Element Type Definition
Element Type Definition

  • Click the Next button of the related element type.
  • Fill these Element Type properties, so that Kron PAM can identify the OS of the discovered instances. AWS Element Type Pattern, AWS Access Protocol, and AWS SSH Username properties.
Element Type Properties
Element Type Properties


Field Name

Parameter Value

Aws Access Protocol

Mandatory.

This property is used to determine the default access method for the discovered instance.



Aws Element Type Pattern

Mandatory.

One element can have multiple patterns.

This pattern is checked against the “AMI ID” description of the instance, in order to determine the OS type.

Aws SSH Username

Mandatory. This username is used as the default log in credential.

Aws Port Number

Optional. Devices are imported with the defined port number value. If this value is not set, a default port number is used, such as 22 for SSH.

Aws Ami ID

Optional.

Exact AMI IDs should be defined.

This property can be defined as multiple in one element.

If this value is set, the exact AMI ID match is checked before the element type pattern (device.import.aws.element.type.pattern) matches, when attempting to import devices.

Aws Save Windows Admin Password

While importing Windows devices from AWS, the usernames and passwords will be retrieved from AWS by using a private key for zero-touch onboarding.

If the parameter is set as “true”, the credentials are stored in the “AdminCredentials-<$publicIPofdevice>” SAPM.

If this value is not set, the default value is “False”

AWS Instance AMI Description
AWS Instance AMI Description


Current element types can also be used instead of creating new element types for each device type. The Element type pattern should be set as the desired types like “Linux|Debian|Ubuntu”.

Element Type Properties Example
Element Type Properties Example