In the Dawnguard app, go to Settings → Cloud.
Click + Add Connection.
From the dropdown menu, select Amazon Web Services.
In the modal, enter a Connection Name.
For the Access Key and Secret Access Key:
1. For the Access Key and Secret Access Key:
2. Go to https://console.aws.amazon.com and log in to your AWS account.
3. In the AWS search bar, type “IAM” and select IAM under Services.
4. Under Access management, click Users.
5. In the user table, click Create user.
6. Enter a username with the suggested format: {SUBSCRIPTION}_DAWNGUARD_READER (change SUBSCRIPTION), then click Next.
7. Under Set permissions, select Attach policies directly.
8. In the permissions policies table, search for ReadOnlyAccess.
9. Use the Filter by type dropdown and select AWS managed job function to narrow results.
10. Select the ReadOnlyAccess policy.
11. Under Set permissions boundary, you may optionally define a permissions boundary.
12. Click Next, review your settings, and then click Create user.
13. Once the user is created, locate and click on dawnguard.app in the user table.
14. Go to the Security credentials tab.
15. Under Access keys, click Create access key.
16. For the Use case, select Third-party service, check the confirmation box, and click Next.
17. Enter a description tag value, then click Create access key.
18. Copy the Access key and Secret access key (these are shown only once).
19. Enter these values in Dawnguard to complete the setup.
You can optionally check Daily Sync to automatically update cloud architectures each day.
Click Add Connection to complete the setup.

Microsoft Azure

In the Dawnguard app, go to Settings → Cloud.
Click + Add Connection.
From the dropdown menu, select Microsoft Azure.
In the modal, enter a Connection Name.
For the Tenant ID, Client ID and Client Secret:
1. Go to https://portal.azure.com and log in to your Azure account.
2. In the search bar, type App registrations and select it under Services.
3. Click + New registration.
4. Enter a name with the suggested format: {SUBSCRIPTION}_DAWNGUARD_READER (change SUBSCRIPTION), then click Register.
5. Under the Manage section, select Certificates & secrets.
6. Click + New client secret.
7. Enter a description and choose an expiration period.
8. Click Add.
9. Copy the Client secret value (this is shown only once) and store it securely.
10. Go to the Overview tab and copy the Application (client) ID and Directory (tenant) ID.
11. Enter these values in Dawnguard.
12. In the search bar, type Management groups and select it under Services.
13. Select the Management group(s) or Subscriptions you want Dawnguard to read data from.
14. Click Access control (IAM).
15. Click + Add, then choose Add role assignment.
16. Under Job function roles, search for Reader and select the Reader role.
17. Click Next.
18. Click + Select members.
19. Search for and select the app registration you just created.
20. Click Select.
21. Click Next.
22. Choose the assignment duration according to your company’s requirements.
23. Click Next again.
24. Review all details, then click Review + assign to finalize the role assignment.
You can optionally check Daily Sync to automatically update cloud architectures each day.
Click Add Connection to complete the setup.

Edit Cloud Connection

In the Dawnguard app, go to Settings → Cloud.
In the table, hover over the connection you want to edit and click the menu button.
From the dropdown menu, select Edit. ‍
Update the fields you want to modify.
When finished, click Save Changes to apply your updates.

Sync Cloud Connection

In the Dawnguard app, go to Settings → Cloud.
In the table, hover over the connection you want to sync and click the menu button.
From the dropdown menu, select Sync.
The synchronization process may take some time to complete.

Delete Cloud Connection

In the Dawnguard app, go to Settings → Cloud.
In the table, hover over the connection you want to delete and click the menu button.
From the dropdown menu, select Delete.
In the confirmation dialog, click Delete to confirm.

General

Documents