This topic describes how to get started with a Bastionhost V3.2 instance for secure O&M and session auditing after activating it.
To use a Bastionhost V3.2 instance, perform the following steps.
|
Task |
Description |
|
Step 1: Synchronize Alibaba Cloud ECS assets and manage ECS accounts |
To use Bastionhost for O&M, an administrator must add assets to the instance. This involves synchronizing and importing ECS assets from your Alibaba Cloud account and creating host accounts. |
|
To use Bastionhost for O&M, an administrator must create local users or import RAM users. This task focuses on importing RAM users (sub-accounts of an Alibaba Cloud account) into Bastionhost. |
|
|
Step 3: Grant permissions on assets and asset accounts to users |
After adding assets and users, an administrator must grant O&M permissions. This task involves granting a user permission to manage a specific host and its accounts. |
|
Once permissions are granted, users can access their authorized assets via a client or web browser. This task outlines the O&M procedures. |
|
|
Administrators can monitor user sessions on the Bastionhost console as users perform O&M on servers by using protocols such as SSH, RDP, and SFTP. This task explains how to query audit data and terminate high-risk sessions. |
For more information about Bastionhost features, such as configuring user groups and asset groups for batch operations, see the User Guide (V3.2). To perform these operations programmatically, see the API Overview.