Skip to content

APIsec AWS Fargate

AWS FargateTM - Amazon Elastic Container Service (ECS) -

APIsec AWS Fargate

Deployment of APIsec Scanner in AWS Fargate

  • Login into AWS Account.
  • Select Amazon Elastic Container Service (ECS).ECS

  • Select Clusters.

  • Clusters

  • Create a New Cluster

  • Select "Networking Only" Option
  • Give Unique Cluster Name.Config  Cluster

  • Skip VPC and CloudWatch option,Click on create

  • Select View Cluster.
  • Cluster Created

  • Task Definitions.

  • Task Def

  • Create a New Task Definition

  • Select 'FARGATE' Option.Task Config

  • Followed by Next, Give Unique Name & Select the rest options as provided.Task Congif1

  • Add Container

  • Select atleast below mentioned CPU and Memory to run scans on playbooks smoothly.Task Config2

  • Give Unique Container name, Image name(fxlabs/bot:latest).Container

  • Skip all options & proceed on “Environment variables” section to add scanner parameters from scanner created page of APIsec Product.Env Variables

  • Optional :- Log configuration.
  • Add Container.
  • Click on Create.
  • APIsec Launched

  • Redirect to home page, then Click on Newly Created Cluster. Cluster Created1

  • CREATE A NEW RUN TASK

  • Click on Task and then click on RUN NEW TASK. Run Task

  • Select FARGATE as Launch type and select all required options as provided.Task config Task config1

Note : If above Auto-assign public IP is selected as disable, the container will be in stop state.

  • On Container Override Expand to see Cluster with Env created and then click on RUN TASK, wait for 2minutes.Task created
  • Click on Task to see information and its resources. Task 1
  • Click on "Check Status" of the Created Scanner in Scanner page of APIsec product. Status

  • Now you can run scans on the PLAYBOOKS in projects.

  • Cluster and Container Details : Details image1

Note

  • If Auto-assign public IP is selected as disable, the container will be in stop state.
  • To Delete cluster, first you need to stop the TASK.
  • If you are behind firewall/vpn, then you will have to whitelist cloud.apisec.ai IP (104.196.107.163) and port 5671 on the outbound request for the scanner to connect with the APIsec server.