How-to guides
Users can create the service by entering the required information for the Config Inspection service and selecting detailed options through the Samsung Cloud Platform Console.
Create Certificate
To create and use the Config Inspection service in the Samsung Cloud Platform Console, you must first generate an authentication key.
Authentication key creation is **My Menu > My Info. > Authentication Key Management > Authentication Key Creation can be created. For more details, please refer to Authentication Key Management.
- The expiration period of the authentication key is up to 365 days.
- To create an authentication key without an expiration date, it must be generated permanently.
Create Config Inspection
You can create and use the Config Inspection service in the Samsung Cloud Platform Console.
To create a Config Inspection, follow these steps.
- Click the All Services > Security > Config Inspection menu. 1. Navigate to the Service Home page of Config Inspection.
- On the Service Home page, click the Create Config Inspection button. 2. Go to the Create Config Inspection page.
- Config Inspection Creation On the page, enter the inputs required to create the service, and select detailed options.
- Enter or select the required information in the Service Information Input area.
Category required statusDetailed description Diagnosis Type - Automatic configuration via Console Cloud Required Select cloud to diagnose - SCP: Samsung Cloud Platform
- AWS: Amazon Web Services
- Azure: Microsoft Azure
- Detailed input fields vary depending on the selected cloud type
Diagnostic Target > Diagnosis Name Required Name to distinguish the diagnostic target - Use the entered value as the resource name
- Enter within 25 characters using English letters, numbers, and special characters (
-,_)
Diagnostic target > Diagnostic account Required Console information to be diagnosed - Select the Account ID to diagnose from the list
- If the same Account ID is selected, duplicate requests will be made, resulting in additional charges
- AWS is selected, enter the Account ID (12 digits) for the diagnostic account
- Azure is selected, enter the Subscription ID (36 characters, including letters, numbers, and special characters) for the diagnostic account
Checklist Required Select the checklist to apply during diagnosis version Required Select the checklist version to apply during diagnosis Diagnostic Schedule > Diagnostic Cycle Required After selecting Use, choose the diagnostic interval - The diagnosis runs on the selected date according to the specified interval
- If Monthly is selected, the diagnosis may not be performed on the selected date
- Example) Selecting the 31st of each month – February has no such date, so the diagnosis is not performed
Diagnostic Schedule > Start Time Required Select diagnostic start time - Set the hour and minute information for starting the diagnostic
authentication key Required Select authentication key to use for Open API calls - Select button click and, in the Select authentication key popup, choose the appropriate key from the authentication key list
- If no selectable authentication keys are available, click Authentication Key Management to create a new authentication key
- For detailed information about authentication keys, refer to Authentication Key Management
Pricing plan Selection Select a plan - Standard: Charges are based on the number of diagnoses
- Monthly subscription: Charges a fixed amount each month regardless of the number of diagnoses (up to 30 diagnoses per month)
- The plan cannot be changed after service enrollment
Table. Config Inspection service information input fields - Enter or select the required information in the Additional Information Input area.
Category required statusDetailed description tag Selection Add Tag - Up to 50 per resource can be added
- After clicking the Add Tag button, input or select Key, Value values
Table. Config Inspection additional information entry fields
- Enter or select the required information in the Service Information Input area.
- Summary Check the detailed information and estimated charges generated in the panel, and click the Create button.
- When creation is complete, check the created resources on the Config Inspection List page.
View detailed information of Config Inspection
The Config Inspection service allows you to view and edit the full list of resources and detailed information. On the Config Inspection Details page, it consists of the Detailed Information, Tags, Operation History tabs.
To view detailed information of the Config Inspection service, follow these steps.
- Click the All Services > Security > Config Inspection menu. 1. Navigate to the Service Home page of Config Inspection.
- On the Service Home page, click the Config Inspection menu. 2. Go to the Config Inspection List page.
- Config Inspection List page, click the resource to view detailed information. 3. Config Inspection Details page.
- Config Inspection Details page displays status information and additional feature information, and consists of Details, Tags, Activity Log tabs.
Category Detailed description status Indicates the status of Config Inspection - Ready: When there is no diagnostic request after the service is created (diagnostic request possible)
- In Progress: When a diagnostic request is being executed (diagnostic request/service termination not allowed)
- Error: When an error occurs in the diagnostic request (diagnostic request possible)
- Completed: When the diagnostic request completes successfully (diagnostic request possible)
Diagnosis request Button to perform console diagnostics Service termination Cancel service button Table. Config Inspection status information and additional features
- Config Inspection Details page displays status information and additional feature information, and consists of Details, Tags, Activity Log tabs.
Detailed Information
Config Inspection List page lets you view detailed information of the selected resource and, if needed, modify the information.
| Category | Detailed description |
|---|---|
| service | service name |
| Resource Type | Resource Type |
| SRN | Unique resource ID in Samsung Cloud Platform |
| Resource name | Resource Name |
| Resource ID | Unique resource ID in the service |
| Constructor | User who created the service |
| Creation Timestamp | Service creation date and time |
| Modifier | User who edited the service information |
| Modification date | Service information modification date and time |
| Diagnosis Type | Diagnostic types provided by the service |
| Cloud | Diagnosis target types |
| Diagnostic target | Console information for the diagnostic target
|
| Recent diagnostic results | Result of the most recent diagnostic request
|
| Recent diagnosis date and time | Timestamp of the last executed diagnostic request |
| Diagnostic Schedule | Display selected diagnostic schedule information
|
| Authentication key | The authentication key of the user registered when creating the service
|
| Checklist | Selected diagnostic checklist type |
| version | Selected diagnostic checklist version information |
| Version status | Status of the selected diagnostic checklist version |
| Plan | Selected plan type |
Tag
On the Config Inspection List page, you can view the tag information of the selected resource and add, modify, or delete it.
| Category | Detailed description |
|---|---|
| Tag list | Tag list
|
Job History
Config Inspection list On the page, you can view the operation history of the selected resource.
| Category | Detailed description |
|---|---|
| Task History List | Resource Change History
|
Config Inspection Resource Management
If you need to view the status of a Config Inspection resource and request a diagnosis, you can perform the task on the Config Inspection List or Config Inspection Details page.
Modify authentication key
You can select the authentication key to use for each diagnostic target.
To modify the service’s authentication key, follow these steps.
- All Services > Security > Config Inspection click the menu. 1. Navigate to the Service Home page of Config Inspection.
- On the Service Home page, click the Config Inspection menu. 2. Go to the Config Inspection List page.
- On the Config Inspection List page, click the resource to edit the authentication key. 3. Navigate to the Config Inspection Details page.
- Check the authentication key and click the Edit icon. 4. Edit Authentication Key The popup window opens.
- Edit Authentication Key Select the authentication key to use in the popup window and click the Confirm button.
Category Detailed description Authentication key Authentication Key Details Created At Authentication key creation date Expiration date and time Authentication key expiration date status Authentication key status - Active: Available
- Expired: Usage period expired
Table. Authentication key edit popup items
- When the authentication key is deleted, it is displayed as
-status. - The authentication key information (authentication key, status) of resources created by other users is displayed as
-.
Request Diagnosis
You can request a diagnosis from the Console based on the configured checklist.
To request a console diagnosis, follow these steps.
Click the All Services > Security > Config Inspection menu. 1. Navigate to the Service Home page of Config Inspection.
On the Service Home page, click the Config Inspection menu. 2. Go to the Config Inspection List page.
Config Inspection List page, click the resource for which you want to request a diagnosis. 3. Go to the Config Inspection Details page.
On the Config Inspection Details page, click the Diagnostic Request button. 4. Diagnostic Request The popup window opens.
Diagnosis Request In the popup window, enter the information required for the diagnosis and click the Confirm button.
- Diagnostic Request popup window items vary depending on the selected Console.
Category Detailed description Console access method Set the console access method to the authentication key method. Authentication key If you select SCP, choose the pre‑generated authentication key. Access Key Enter Access Key when AWS is selected Secret Key Enter Secret Key if AWS is selected Client ID If Azure is selected, enter the Client ID. Client Secret If Azure is selected, enter the Client Secret Tenant ID Enter Tenant ID if Azure is selected Table. Diagnosis request popup items
- Diagnostic Request popup window items vary depending on the selected Console.
On the Config Inspection List page, check the status value.
- When the diagnostic request is completed, the status value is displayed as Completed or Error.
- In the case of Completed, you can view the diagnostic request results in the diagnostic results menu. * For more details, please refer to Diagnostic Result Management.
Terminate Config Inspection
You can cancel the Config Inspection service you are not using. Note that if you disable Config Inspection, all stored diagnostic data will be deleted.
- If you terminate the resource, all diagnostic data will be deleted, and you will not be able to view diagnostic results in the Report.
- If the status of the Config Inspection service is In Progress, the service cannot be terminated.
To disable Config Inspection, follow these steps.
- All Services > Security > Config Inspection Click the menu. 1. Navigate to the Service Home page of Config Inspection.
- On the Service Home page, click the Config Inspection menu. 2. Navigate to the Config Inspection List page.
- On the Config Inspection List page, click the resource to be terminated. 3. Navigate to the Config Inspection Details page.
- On the Config Inspection Details page, click the Service Termination button.
- When termination is complete, check on the Config Inspection List page whether the resource has been terminated.