Step 1

Log in to the AWS console as a user with the admin role.

Step 2

From the Dashboard, click Security, Identity & Compliance > IAM.

Step 3

Click Access Management > Users.

Step 4

Click Add Users.

1. In the User Name field, enter a name to identify the user.

2. Click Access Key - Programmatic Access.

3. At the Set permissions page, click Next without granting the user access to anything. You can grant user access later.

4. Add tags to the user if desired.

5. Click Create User.

6. Click Download .csv to download the user's key to your computer.

   Note	This is the only opportunity you have to retrieve the user's key.

7. Click Close.

Step 5

At the Identity and Access Management (IAM) page in the left column, click Access Management > Policies.

Step 6

Click Create Policy.

1. On the Create Policy page, click JSON.

   

2. Enter the following policy in the field:

   {
   	"Version": "2012-10-17",
   	"Statement": [
   		{
   			"Effect": "Allow",
   			"Action": [
   				"ec2:DescribeTags",
   				"ec2:DescribeInstances",
   				"ec2:DescribeVpcs"
   			],
   			"Resource": "*"
   		}
   	]
   }
   

3. Click Next.

Step 7

Click Review.

Step 8

Attach your policy

1. On the Policies page, enter all or part of the policy name in the search field and press Enter.

2. Click the policy you just created.

3. Click Actions > Attach.

4. If necessary, enter all or part of the user name in the search field and press Enter.

5. Click Attach Policy.

Step 1

Log in to the Secure Firewall Management Center.

Step 2

Click Integrations > Dynamic Attributes Connector > Connectors.

Step 3

Do any of the following:

Step 4

Enter the following information.

1. Click Save.

   The Status column displays Ok.

Step 1

Log in to the Azure Portal as the owner of the subscription.

Step 2

Click Azure Active Directory.

Step 3

Click Add > App registration.

1. In the Name field, enter a name to identify this application.

2. Enter other information on this page as required by your organization.

3. Click Register.

Step 4

On the next page, write down or copy the Client ID (also referred to as application ID) and the tenant ID (also referred to as the directory ID).

Step 5

Next to Client Credentials, click Add a certificate or secret.

Step 6

Click New Client Secret.

1. Enter the requested information and click Add.

2. Copy the value of the Value field to the clipboard. This value, and not the Secret ID, is the client secret.

   

Step 7

Go back to the main Azure Portal page and click Subscriptions.

1. Click the name of your subscription.

2. Copy the subscription ID to the clipboard.

   

Step 8

Click Access Control (IAM).

1. Click Add > Add role assignment.

2. Click Reader and click Next.

3. Click Select Members.

4. On the right side of the page, click the name of the app you registered and click Select.

   

5. Click Review + Assign and follow the prompts to complete the action.

   Also see Create an Azure connector.

Step 1

Log in to the Secure Firewall Management Center.

Step 2

Click Integrations > Dynamic Attributes Connector > Connectors.

Step 3

Do any of the following:

Step 4

Enter the following information.

1. Click Save.

   The Status column displays Ok.

Step 1

Get the Cisco ACI Endpoint Update App site prefix and update interval if you're currently using it.

Step 2

Find a user with appropriate access to configure the integration.

Step 3

Get the Cisco APIC tenant name.

Step 4

Get the Cisco APIC application profile name.

Step 5

Get the EPG name.

The Cisco APIC EPG name is used in the names of dynamic objects created by this integration. To find it:

1. Log in to Cisco APIC.

2. Click Tenants.

3. Double-click the name of your tenant.

4. Expand your tenant.

5. Expand Application Profiles.

6. Expand the name of the application profile.

7. Expand Application EPGs.

8. Write down the name of the EPG or ESG that has network object groups to send to ASA.

   This figure shows an example.

   

Step 1

Log in to the Secure Firewall Management Center.

Step 2

Click Integrations > Dynamic Attributes Connector > Connectors.

Step 3

Do any of the following:

Step 4

Enter the following information.

Step 5

Click Test and make sure the test succeeds before you save the connector.

Step 1

Log into vCenter as an administrator.

Step 2

Click Menu > Administration.

Step 3

In the left pane, click Single Sign On > Users and Groups.

Step 4

From the Domain list, click the name of a domain to add the user.

Step 5

Click Add User.

1. Enter the requested information and click Add.

Step 6

In the left pane, click Access Control > Global Permissions.

Step 7

Click Add().

1. From the User field, click the name of the vCenter domain in which you created the user.

2. In the search field, enter part of the user's name.

3. From the Role list, click Read-only.

4. Select the Propagate to children check box.

   

Step 8

Click OK.

Step 1

Log in to the Secure Firewall Management Center.

Step 2

Click Integrations > Dynamic Attributes Connector > Connectors.

Step 3

Do any of the following:

Step 4

Enter the following information.

Step 5

Click Save.