Step 3. Selecting the cloud environment and authorization

This section describes features applicable only to Kaspersky Security Center 12.1 or a later version.

Specify the following settings:

Cloud environment
Select the cloud environment in which you are deploying Kaspersky Security Center: AWS, Azure, or Google Cloud.

If you plan to work with more than one cloud environment, select one environment and then run the wizard again.
Connection name
Enter a name for the connection. The name cannot contain more than 256 characters. Only Unicode characters are permitted.

This name will also be used as the name for the administration group for the cloud devices.

If you plan to work with more than one cloud environment, you might want to include the name of the environment in the connection name, for example, "Azure Segment", "AWS Segment", or "Google Segment".

Enter your credentials to receive authorization in the cloud environment that you specified.

AWS

If you selected AWS as the cloud segment type, you need an IAM role or an AWS IAM access key for further polling of the cloud segment.

AWS IAM role assigned to an EC2 instance
Select this option if you have an IAM role with the required rights for the Administration Server.
AWS IAM user
Select this option if you have an AWS IAM access key. Enter your key data:
- Access key ID
  The IAM access key ID is a sequence of alphanumeric characters. You received the key ID when you created the IAM user account.
  
  The field is available if you selected an AWS IAM access key for authorization instead of an IAM role.
- Secret key
  The secret key that you received with the access key ID when you created the IAM user account.
  
  The characters of the secret key are displayed as asterisks. After you begin entering the secret key, the Show button is displayed. Click and hold this button for the necessary amount of time to view the characters you entered.
  
  The field is available if you selected an AWS IAM access key for authorization instead of an IAM role.
  
  To see the characters that you entered, click and hold the Show button.

Azure

If you selected Azure as the cloud segment type, specify the following settings for the connection that will be used for further polling of the cloud segment:

Azure Application ID
You created this application ID on the Azure portal.

You can provide only one Azure Application ID for polling and other purposes. If you want to poll another Azure segment, you must first delete the existing Azure connection.
Azure Subscription ID
You created the subscription on the Azure portal.
Azure Application password
You received the password of the Application ID when you created the Application ID.

The characters of the password are displayed as asterisks. After you begin entering the password, the Show button becomes available. Click and hold this button to view the characters you entered.

To see the characters that you entered, click and hold the Show button.
Azure storage account name
You created the name of the Azure storage account for working with Kaspersky Security Center.
Azure storage access key
You received a password (key) when you created Azure storage account for working with Kaspersky Security Center.

The key is available in section "Overview of the Azure storage account," in subsection "Keys."

To see the characters that you entered, click and hold the Show button.

Google Cloud

If you selected Google Cloud as the cloud segment type, specify the following settings for the connection that will be used for further polling the cloud segment:

Client email address
Client email is the email address that you used for registering your project at Google Cloud.
Project ID
Project ID is the ID that you received when you registered your project at Google Cloud.
Private key
Private key is the sequence of characters that you received as your private key when you registered your project at Google Cloud. You might want to copy and paste this sequence to avoid mistakes.

To see the characters that you entered, click and hold the Show button.

The connection that you specified is saved in the application settings.

The Configure cloud environment wizard allows you to specify only one segment. Later, you can specify more connections to manage other cloud segments.

Click Next to proceed.