Security Center:Third-party cloud OpenAPI components

Step 1: Configure multi-cloud assets

To use third-party cloud OpenAPI components, go to System Configuration > Feature Settings > Multi-cloud Configuration Management and complete authorization in the Multi-cloud Assets module. Skip this step if you have already completed the configuration.

• AWS, Tencent Cloud, Huawei Cloud, and Azure

  • Permission Description: Select Agentic SOC.

  • Follow the console instructions or see Onboard third-party cloud assets to complete the configuration.

• Chaitin and Fortinet

  • Click Grant Permission and select IDC.

  • Enter the access point, API token, and device name.

  • Configuration policy: To prevent AccessKey pair expiration from affecting your services, we recommend that you enable AK Service Status Check.

Step 2: Select a cloud product

1. In the Component Actions area, click Third-party Cloud Components.

2. In the Third-party Cloud Components dialog box, select the target cloud product (not Threatbook).

   Note

   • For the Threatbook component, see Threatbook component.

   • Supported products are updated regularly. Check the console for the latest list.

   Third-party cloud	Component name (product name)
   AWS	Cloud Firewall, Web Application Firewall
   Tencent Cloud	Cloud Firewall, Web Application Firewall, Content Delivery Network
   Huawei Cloud	Cloud Firewall, Web Application Firewall, Application Performance Management, Configuration Audit
   Azure	Cloud Firewall, Web Application Firewall
   Chaitin	Web Application Firewall
   Fortinet	Cloud Firewall

Step 2: Configure parameters

1. On the canvas, click the cloud product component, and then click the settings button in the execute Action area on the configuration page.

2. Refer to the following descriptions to complete the configuration.

   Parameter	Description
   Third-party cloud account ID	The cloud account ID of the third-party cloud. For IDC devices, this is the device name. Configure it in System Settings > Feature Settings > Multi-cloud Configuration Management > Multi-cloud Assets. For details, see .
   Alibaba Cloud account ID	The Alibaba Cloud account ID associated with the third-party cloud account. You can enter a member account ID managed by your current Alibaba Cloud account. For information about how to add member accounts, see Multi-account security management. If left blank, the current Alibaba Cloud account is used.
   Region	Optional. Some third-party cloud OpenAPI calls require an explicit region.
   Product	The list of available products.
   Domain name	The domain of the OpenAPI.
   Action	The OpenAPI operation to call.