Views:

Retrieving TrendAI Vision One Parameters

  1. Retrieve parameters from the TrendAI Vision One dashboard, under Endpoint Security > Endpoint Inventory.

    Module state

  2. Click Agent Installer.

    Module state

  3. Click Deployment Script. Select "Endpoint Sensor" for Protection type. Select "Linux" for Operating system. Within the preview script, copy the values for company_id, scenario_ids under x86_64 (x86_64_xbc_agent_token), and scenario_ids under aarch64 (aarch64_xbc_agent_token).

    Module state

Setting Parameter Store Values

  1. Navigate to AWS Systems Manager > Parameter Store and create the following parameters.
      First Parameter Second Parameter Third Parameter
    Name /WorkloadSecurity/ImageBuilder/company_id /WorkloadSecurity/ImageBuilder/x86_64_xbc_agent_token /WorkloadSecurity/ImageBuilder/aarch64_xbc_agent_token
    Data type text text text
    Type String String String
    Value company_id
    (Retrieved from TrendAI Vision One)    		 x86_64_xbc_agent_token
    (Retrieved from TrendAI Vision One)    		 aarch64_xbc_agent_token
    (Retrieved from TrendAI Vision One)
  2. To create the parameters, click Create parameter and fill out the Parameter details with the values listed above and those retrieved from TrendAI Vision One.

    Module state

  3. The following is an example of creating the first parameter. Repeat for all parameters listed above.

    Module state

Setting up IAM Role for EC2 Instance

  1. Navigate to IAM > Roles and create a new role.

    Module state

  2. Select EC2 as the trust entity type.

    Module state

  3. Add the following Permission policies to the role:
    • AmazonSSMFullAccess
    • AmazonSSMManagedInstanceCore
    • EC2InstanceProfileForImageBuilder

    Module state

  4. Name and finish creating the role.

    Module state

  5. Edit the role to add the following inline policy. 
    {
"Version": "2012-10-17",
"Statement": [
        {
        "Sid": "VisualEditor0",
        "Effect": "Allow",
        "Action": [
            "ssm:PutParameter",
            "ssm:LabelParameterVersion",
            "ssm:DeleteParameter",
            "ssm:UnlabelParameterVersion",
            "ssm:DescribeParameters",
            "ssm:GetParameterHistory",
            "ssm:DescribeDocumentParameters",
            "ssm:GetParametersByPath",
            "ssm:GetParameters",
            "ssm:GetParameter",
            "ssm:DeleteParameters",
            "s3:get*",
            "s3:List*",
            "imagebuilder:GetComponent"
        ],
        "Resource": "*"
        }
    ]
}

    Module state

    Module state

    Module state

Creating a Recipe with TrendAI Vision One Endpoint Security Agent component

  1. Navigate to EC2 Image Builder > Images recipes and create an image recipe.

    Module state

  2. Retrieve the TrendAI Vision One Endpoint Security Agent component from AWS Marketplace images.

    Module state

  3. Then select a managed instance from AWS with one of the following supported versions:
    • Amazon Linux 2
    • Amazon Linux 2023
    • Ubuntu 20
    • Ubuntu 22
    • Ubuntu 24.04
    • CentOS Linux 8
    • CentOS Stream 8
    • Red Hat Enterprise Linux 8
    • Red Hat Enterprise Linux 9
    • SLES 12
    • SLES 15

    Module state

  4. Ensure the working directory is /tmp.

    Module state

  5. Select the component for TrendAI Vision One Endpoint Security Agent and then finish creating the recipe.

    Module state

    Module state

Creating Infrastructure Configuration

  1. Navigate to EC2 Image Builder > Infrastructure configurations and create a new configuration.

    Module state

  2. Select the IAM role previously created and make sure the instance type is c3.large. Then finish creating the configuration.

    Module state

Creating an Image Pipeline

  1. Navigate to EC2 Image Builder > Image pipelines and create a new pipeline.

    Module state

  2. Name the pipeline and make the build schedule manual.

    Module state

  3. Choose the previously created recipe infrastructure configuration. Then finish creating the recipe.

    Module state

    Module state

Launching an EC2 from AMI

  1. Run the previously created pipeline.

    Module state

  2. When the pipeline is complete, launch an EC2 from the resulting AMI.

    Module state

    Module state

    Module state

  3. Make sure the instance type is c3.large.

    Module state

    Module state

  4. Under Advanced details, select the previously created IAM role, then launch the instance.

    Module state

Connecting EC2 Instance to TrendAI Vision One

  1. Navigate to the instance created using the AMI and connect to it.

    Module state

    Module state

  2. Once connected to the EC2 instance, navigate to /tmp and run the command sh installVisionOneEndpoint.sh as the root user.

    Module state

  3. The EC2 should now be connected to TrendAI Vision One and appear under Endpoint Security > Endpoint Inventory.

    Module state

Keywords: trend vision, trend vision onetm, trend vision onetm agent