The page has been translated by Gen AI.

How-to guides

Users can create the service by entering the required information for the Config Inspection service and selecting detailed options through the Samsung Cloud Platform Console.

Create Certificate

To create and use the Config Inspection service in the Samsung Cloud Platform Console, you must first generate an authentication key.

Authentication key creation is **My Menu > My Info. > Authentication Key Management > Authentication Key Creation can be created. For more details, please refer to Authentication Key Management.

Reference
  • The expiration period of the authentication key is up to 365 days.
  • To create an authentication key without an expiration date, it must be generated permanently.

Create Config Inspection

You can create and use the Config Inspection service in the Samsung Cloud Platform Console.

Reference
Users must belong to the AdministratorGroup user group in order to use the services provided by the Config Inspection service properly.

To create a Config Inspection, follow these steps.

  1. Click the All Services > Security > Config Inspection menu. 1. Navigate to the Service Home page of Config Inspection.
  2. On the Service Home page, click the Create Config Inspection button. 2. Go to the Create Config Inspection page.
  3. Config Inspection Creation On the page, enter the inputs required to create the service, and select detailed options.
    • Enter or select the required information in the Service Information Input area.
      Category
      required status
      Detailed description
      Diagnosis Type-Automatic configuration via Console
      CloudRequiredSelect cloud to diagnose
      • SCP: Samsung Cloud Platform
      • AWS: Amazon Web Services
      • Azure: Microsoft Azure
      • Detailed input fields vary depending on the selected cloud type
      Diagnostic Target > Diagnosis NameRequiredName to distinguish the diagnostic target
      • Use the entered value as the resource name
      • Enter within 25 characters using English letters, numbers, and special characters (-, _)
      Diagnostic target > Diagnostic accountRequiredConsole information to be diagnosed
      • Select the Account ID to diagnose from the list
      • If the same Account ID is selected, duplicate requests will be made, resulting in additional charges
      • AWS is selected, enter the Account ID (12 digits) for the diagnostic account
      • Azure is selected, enter the Subscription ID (36 characters, including letters, numbers, and special characters) for the diagnostic account
      ChecklistRequiredSelect the checklist to apply during diagnosis
      versionRequiredSelect the checklist version to apply during diagnosis
      Diagnostic Schedule > Diagnostic CycleRequiredAfter selecting Use, choose the diagnostic interval
      • The diagnosis runs on the selected date according to the specified interval
      • If Monthly is selected, the diagnosis may not be performed on the selected date
        • Example) Selecting the 31st of each month – February has no such date, so the diagnosis is not performed
      Diagnostic Schedule > Start TimeRequiredSelect diagnostic start time
      • Set the hour and minute information for starting the diagnostic
      authentication keyRequiredSelect authentication key to use for Open API calls
      • Select button click and, in the Select authentication key popup, choose the appropriate key from the authentication key list
      • If no selectable authentication keys are available, click Authentication Key Management to create a new authentication key
      Pricing planSelectionSelect a plan
      • Standard: Charges are based on the number of diagnoses
      • Monthly subscription: Charges a fixed amount each month regardless of the number of diagnoses (up to 30 diagnoses per month)
      • The plan cannot be changed after service enrollment
      Table. Config Inspection service information input fields
    • Enter or select the required information in the Additional Information Input area.
      Category
      required status
      Detailed description
      tagSelectionAdd Tag
      • Up to 50 per resource can be added
      • After clicking the Add Tag button, input or select Key, Value values
      Table. Config Inspection additional information entry fields
  4. Summary Check the detailed information and estimated charges generated in the panel, and click the Create button.
    • When creation is complete, check the created resources on the Config Inspection List page.

View detailed information of Config Inspection

The Config Inspection service allows you to view and edit the full list of resources and detailed information. On the Config Inspection Details page, it consists of the Detailed Information, Tags, Operation History tabs.

To view detailed information of the Config Inspection service, follow these steps.

  1. Click the All Services > Security > Config Inspection menu. 1. Navigate to the Service Home page of Config Inspection.
  2. On the Service Home page, click the Config Inspection menu. 2. Go to the Config Inspection List page.
  3. Config Inspection List page, click the resource to view detailed information. 3. Config Inspection Details page.
    • Config Inspection Details page displays status information and additional feature information, and consists of Details, Tags, Activity Log tabs.
      CategoryDetailed description
      statusIndicates the status of Config Inspection
      • Ready: When there is no diagnostic request after the service is created (diagnostic request possible)
      • In Progress: When a diagnostic request is being executed (diagnostic request/service termination not allowed)
      • Error: When an error occurs in the diagnostic request (diagnostic request possible)
      • Completed: When the diagnostic request completes successfully (diagnostic request possible)
      Diagnosis requestButton to perform console diagnostics
      Service terminationCancel service button
      Table. Config Inspection status information and additional features

Detailed Information

Config Inspection List page lets you view detailed information of the selected resource and, if needed, modify the information.

CategoryDetailed description
serviceservice name
Resource TypeResource Type
SRNUnique resource ID in Samsung Cloud Platform
Resource nameResource Name
Resource IDUnique resource ID in the service
ConstructorUser who created the service
Creation TimestampService creation date and time
ModifierUser who edited the service information
Modification dateService information modification date and time
Diagnosis TypeDiagnostic types provided by the service
CloudDiagnosis target types
Diagnostic targetConsole information for the diagnostic target
  • Provides the diagnostic name and diagnostic account information of the diagnostic target
  • If the diagnostic target is AWS or Azure, you can click the Edit icon to modify the diagnostic account
Recent diagnostic resultsResult of the most recent diagnostic request
  • COMPLETED: The diagnostic request completed successfully
  • ERROR: The diagnostic request did not complete successfully
    • UNAUTHORIZED: Verify the key permissions used for the diagnostic request
    • INVALID_INPUT_VALUE: Verify input values such as the diagnostic account
    • CONNECTION_FAIL: Check console access control settings
    • ETC: For other errors such as diagnostic engine issues, contact the service desk
※ Diagnostic results can be viewed in the Security > Config Insepction > Report menu
Recent diagnosis date and timeTimestamp of the last executed diagnostic request
Diagnostic ScheduleDisplay selected diagnostic schedule information
  • If the diagnostic target is SCP, you can click the Edit icon to change the diagnostic schedule
Authentication keyThe authentication key of the user registered when creating the service
  • Access Key, User, Status provides information
  • Access Key information and the edit icon are displayed only to the user who created the authentication key
    • Click the Edit icon to change the authentication key
  • If the authentication key is deleted, it is shown as - status; if it is expired, it is shown as Expired
  • Authentication key information (Access Key, status) of resources created by other users is displayed as -
ChecklistSelected diagnostic checklist type
versionSelected diagnostic checklist version information
Version statusStatus of the selected diagnostic checklist version
PlanSelected plan type
Table. Config Inspection detailed information tab items

Tag

On the Config Inspection List page, you can view the tag information of the selected resource and add, modify, or delete it.

CategoryDetailed description
Tag listTag list
  • You can view the Key, Value information of the tag
  • Up to 50 tags can be added per resource
  • When entering a tag, you can search and select from the existing list of created Keys and Values
Table. Config Inspection tag tab items

Job History

Config Inspection list On the page, you can view the operation history of the selected resource.

CategoryDetailed description
Task History ListResource Change History
  • Task Timestamp, Resource ID, Resource Name, Task Details, Event Topic, Task Result, Operator Information Check
Table. Config Inspection job history tab items

Config Inspection Resource Management

If you need to view the status of a Config Inspection resource and request a diagnosis, you can perform the task on the Config Inspection List or Config Inspection Details page.

Modify authentication key

You can select the authentication key to use for each diagnostic target.

To modify the service’s authentication key, follow these steps.

  1. All Services > Security > Config Inspection click the menu. 1. Navigate to the Service Home page of Config Inspection.
  2. On the Service Home page, click the Config Inspection menu. 2. Go to the Config Inspection List page.
  3. On the Config Inspection List page, click the resource to edit the authentication key. 3. Navigate to the Config Inspection Details page.
  4. Check the authentication key and click the Edit icon. 4. Edit Authentication Key The popup window opens.
  5. Edit Authentication Key Select the authentication key to use in the popup window and click the Confirm button.
    CategoryDetailed description
    Authentication keyAuthentication Key Details
    Created AtAuthentication key creation date
    Expiration date and timeAuthentication key expiration date
    statusAuthentication key status
    • Active: Available
    • Expired: Usage period expired
    Table. Authentication key edit popup items
Reference
  • When the authentication key is deleted, it is displayed as - status.
  • The authentication key information (authentication key, status) of resources created by other users is displayed as -.

Request Diagnosis

You can request a diagnosis from the Console based on the configured checklist.

To request a console diagnosis, follow these steps.

  1. Click the All Services > Security > Config Inspection menu. 1. Navigate to the Service Home page of Config Inspection.

  2. On the Service Home page, click the Config Inspection menu. 2. Go to the Config Inspection List page.

  3. Config Inspection List page, click the resource for which you want to request a diagnosis. 3. Go to the Config Inspection Details page.

  4. On the Config Inspection Details page, click the Diagnostic Request button. 4. Diagnostic Request The popup window opens.

  5. Diagnosis Request In the popup window, enter the information required for the diagnosis and click the Confirm button.

    • Diagnostic Request popup window items vary depending on the selected Console.
      CategoryDetailed description
      Console access methodSet the console access method to the authentication key method.
      Authentication keyIf you select SCP, choose the pre‑generated authentication key.
      Access KeyEnter Access Key when AWS is selected
      Secret KeyEnter Secret Key if AWS is selected
      Client IDIf Azure is selected, enter the Client ID.
      Client SecretIf Azure is selected, enter the Client Secret
      Tenant IDEnter Tenant ID if Azure is selected
      Table. Diagnosis request popup items
  6. On the Config Inspection List page, check the status value.

    • When the diagnostic request is completed, the status value is displayed as Completed or Error.
    • In the case of Completed, you can view the diagnostic request results in the diagnostic results menu. * For more details, please refer to Diagnostic Result Management.
Reference
For detailed information on the prerequisite settings required to run diagnostics for each console, refer to Preconfigure.

Terminate Config Inspection

You can cancel the Config Inspection service you are not using. Note that if you disable Config Inspection, all stored diagnostic data will be deleted.

Caution
  • If you terminate the resource, all diagnostic data will be deleted, and you will not be able to view diagnostic results in the Report.
  • If the status of the Config Inspection service is In Progress, the service cannot be terminated.

To disable Config Inspection, follow these steps.

  1. All Services > Security > Config Inspection Click the menu. 1. Navigate to the Service Home page of Config Inspection.
  2. On the Service Home page, click the Config Inspection menu. 2. Navigate to the Config Inspection List page.
  3. On the Config Inspection List page, click the resource to be terminated. 3. Navigate to the Config Inspection Details page.
  4. On the Config Inspection Details page, click the Service Termination button.
  5. When termination is complete, check on the Config Inspection List page whether the resource has been terminated.
Checklist
Check dashboard