<style>p { margin: 0; }span.fr-emoticon.fr-emoticon-img { background-repeat: no-repeat !important; font-size: inherit; height: 1em; width: 1em; min-height: 20px; min-width: 20px; display: inline-block; margin: -0.1em 0.1em 0.1em; line-height: 1; vertical-align: middle; } span.fr-emoticon { font-weight: normal; font-family: "Apple Color Emoji", "Segoe UI Emoji", "NotoColorEmoji", "Segoe UI Symbol", "Android Emoji", "EmojiSymbols"; display: inline; line-height: 0; } blockquote { border-left: solid 2px #5e35b1; color: #5e35b1; margin-left:0; padding-left:5px;}blockquote blockquote{ border-color: #00bcd4; color: #00bcd4;}blockquote blockquote blockquote{ border-color: #43a047; color: #43a047;} table.grid{ border-collapse: collapse;} table.grid td, table.grid th { border: 1px solid #ddd;} .fr-fic.fr-dib{ display: block; margin: 5px auto;}.fr-fic.fr-dib.fr-fir{ text-align: right; margin: 5px 0 5px auto;}.fr-fic.fr-dib.fr-fil{ text-align: left; margin: 5px auto 5px 0;}.fr-fic.fr-dii{ float: none; margin: 5px auto;}.fr-fic.fr-dii.fr-fil{ float: left; margin: 5px auto;}.fr-fic.fr-dii.fr-fir{ float: right; margin: 5px auto;}img.fr-dib.fr-fir { margin-right: 0; text-align: right;}img.fr-dib.fr-fil { margin-left: 0; text-align: left;}img.fr-dib { margin: 5px auto; display: block; float: none;}img.fr-bordered { box-sizing: content-box; border: solid 5px #CCC;}img.fr-shadow { box-shadow: 10px 10px 5px 0px #cccccc;}img.fr-rounded { border-radius: 10px; -moz-border-radius: 10px; -webkit-border-radius: 10px; -moz-background-clip: padding; -webkit-background-clip: padding-box; background-clip: padding-box;}</style><style>
p {
margin: 0;
}
span.fr-emoticon.fr-emoticon-img {
background-repeat: no-repeat !important; font-size: inherit; height: 1em; width: 1em; min-height: 20px; min-width: 20px; display: inline-block; margin: -0.1em 0.1em 0.1em; line-height: 1; vertical-align: middle;
}
span.fr-emoticon {
font-weight: normal; font-family: "Apple Color Emoji", "Segoe UI Emoji", "NotoColorEmoji", "Segoe UI Symbol", "Android Emoji", "EmojiSymbols"; display: inline; line-height: 0;
}
blockquote {
border-left: solid 2px #5e35b1; color: #5e35b1; margin-left: 0; padding-left: 5px;
}
blockquote blockquote {
border-color: #00bcd4; color: #00bcd4;
}
blockquote blockquote blockquote {
border-color: #43a047; color: #43a047;
}
table.grid {
border-collapse: collapse;
}
table.grid td,
table.grid th {
border: 1px solid #ddd;
}
.fr-fic.fr-dib {
display: block; margin: 5px auto;
}
.fr-fic.fr-dib.fr-fir {
text-align: right; margin: 5px 0 5px auto;
}
.fr-fic.fr-dib.fr-fil {
text-align: left; margin: 5px auto 5px 0;
}
.fr-fic.fr-dii {
float: none; margin: 5px auto;
}
.fr-fic.fr-dii.fr-fil {
float: left; margin: 5px auto;
}
.fr-fic.fr-dii.fr-fir {
float: right; margin: 5px auto;
}
img.fr-dib.fr-fir {
margin-right: 0; text-align: right;
}
img.fr-dib.fr-fil {
margin-left: 0; text-align: left;
}
img.fr-dib {
margin: 5px auto; display: block; float: none;
}
img.fr-bordered {
box-sizing: content-box; border: solid 5px #CCC;
}
img.fr-shadow {
box-shadow: 10px 10px 5px 0px #cccccc;
}
img.fr-rounded {
border-radius: 10px; -moz-border-radius: 10px; -webkit-border-radius: 10px; -moz-background-clip: padding; -webkit-background-clip: padding-box; background-clip: padding-box;
}
</style><p><strong>In this guide we will cover:</strong></p><p><strong>- What is the AWS Integration?</strong></p><p><strong>- How to import instances from AWS to Halo</strong></p><p><br></p><p><br></p><p id="isPasted"><strong><span style="font-size: 14pt;">What is the AWS Integration?</span></strong></p><p>The AWS integration is used to import instances from Amazon Web Services into Halo. Allowing you to manage your servers (instances) in Halo. When instances are imported these will be created as assets in your Halo instance, data against the instance in AWS will be imported into fields against the asset. </p><p><br></p><p>The types of instance you can import will differ depending on the version of Halo you are using:</p><ul><li>Versions prior to v2.198 - import EC2 instance only.</li><li data-pasted="true">Versions v2.198+ - import EC2 and RDS instances.</li><li data-pasted="true">Versions v2.224+ - import EC2, RDS, ELB and ECS instances.</li></ul><p><br></p><p>Instances can be imported on a recurring schedule to ensure data is consistent between the AWS instance and Halo asset. </p><p id="isPasted"><br></p><p><strong><span style="font-size: 14pt;">Connecting to AWS</span></strong><span style="font-size: 14pt;"><br></span></p><p>First you will need to enable the AWS integration module. Head to configuration > integrations and enable the module using the '+' icon. </p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjM4MTg3YzdkLTk1MDEtNDVmMy04MGFlLTI2MGZjNjZlZjE4YyJ9.uSweott7B2VAasmVwxwnRxCG2uT3OqQO7PXRkZulcKc" class="fr-fic fr-fil fr-dib" width="276" height="135"></p><p><strong><span style="font-size: 10pt;">Fig 1. Enable integration module</span></strong></p><p><br></p><p>Once enabled click into the module and create a new connection. Under the 'details' tab you will see an access and secret key are required to connect to the integration. </p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjFjZTc5YzJiLWZlMzAtNDA0Mi1iMDc2LWYwY2M4NDc4N2FkOCJ9.EDotYQPZN0deYuuHPEAyWhldhrm9Mjt4qgtNRv68K_k" class="fr-fic fr-fil fr-dib" width="1365" style="width: 1367px; height: 506.687px;" height="507"></p><p><strong><span style="font-size: 10pt;">Fig 2. AWS connection details</span></strong></p><p><br></p><p>The access key you use here can either be a root access key or an IAM access key. </p><p><strong>Root access key</strong> - Will give the application administrator permissions</p><p><strong>IAM access key</strong> - Allows you to choose the permissions the application has.</p><p><br></p><p>For information on how to obtain a root access key see the documentation by AWS <a data-fr-linked="true" href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_root-user_manage_add-key.html" id="isPasted" target="_blank" rel="noopener noreferrer">here</a>.</p><p><br></p><p>For information on how to create an IAM access key see the documentation by AWS <a data-fr-linked="true" href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access-keys-admin-managed.html" target="_blank" rel="noopener noreferrer">here</a>. The user you are creating the access key for must have permission to read/view the instances you would like to import into Halo. For information on how to change user permissions in AWS see their documentation <a data-fr-linked="true" href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_users_change-permissions.html" id="isPasted" target="_blank" rel="noopener noreferrer">here</a>.</p><p><br></p><p>Now you have your access key and secret paste these into the field shown in figure 2 (in Halo).</p><p><br></p><p>From v2.224+ you will also have the field "AWS Service", here choose the service type you would like to import instances of. If you would like to import multiple services you will need to create a connection for each service, each connection will require it's own access key and secret. </p><ul><li>On versions above v2.198 but below v2.224, you will have a tab for each type of service you can import. Complete the setup for the service(s) you would like to import, the setup is the same as outlined in this guide, it is just split between tabs. </li></ul><p>The 'Test configuration' button can be used to ensure you have connected successfully. </p><p><br></p><p><strong><span style="font-size: 14pt;">Asset import configuration</span></strong></p><p>Now you have connected head to the 'Assets' tab under the integration page to setup how the instances will be imported.</p><p> </p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImEwOWE0MmRkLWJkZTMtNDA1Mi05MjhiLTU1NGY2MGY2MTEwYSJ9.ojQpaGO7mQQJqhfqEHp7hcFbWYvew3yTwL2WXOwahGg" class="fr-fic fr-fil fr-dib" width="1217" style="width: 1219px; height: 613.478px;" height="613"></p><p><strong><span style="font-size: 10pt;">Fig 3. AWS asset imports page</span></strong></p><p><br></p><p>In the 'Regions' field add the regions you would like instances to be imported from. Only instances in these regions will be imported. </p><p><br></p><p>In the 'Asset Matching Field' choose the field you would like to be the unique identifier for assets/instances imported from AWS. This field is used to match instances in AWS to existing asset records in Halo. If matched, the record will be updated, if no match is found a new asset will be created in Halo. By default, the AWS ID will always be checked first.</p><p><br></p><p><strong><span style="font-size: 12pt;">Asset Field Mappings</span></strong></p><p id="isPasted">Mappings can be configured to ensure data from AWS fields are imported into a chosen Halo field. Create a mapping by adding to the 'Field mappings' table.</p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjJjZjBlMDZlLTI2ODEtNDY2Zi1iNjhkLWMyMDQzZGQzN2ZjYiJ9.t2brO4SuEj_8y_hlSuyQjx5w_bHIR0lutSWX2Dk4LUY" class="fr-fic fr-fil fr-dib" width="567" height="352"></p><p><strong><span style="font-size: 10pt;">Fig 4. Field mappings</span></strong></p><p><br></p><p><strong>Field Type</strong> - This will be the type of Halo field the data will be imported into. See our guide on <a data-fr-linked="true" href="https://usehalo.com/haloitsm/guides/1785/" id="isPasted" target="_blank" rel="noopener noreferrer"><strong>Asset Fields</strong></a> if you are unsure on the difference between asset fields and custom fields in Halo. </p><p><br></p><p>Now choose the AWS and Halo field you would like to map together. If you would like data from the AWS field to create a new field in Halo select '*Create new field during the next import*' under 'HaloPSA Field'. </p><p><br></p><p><strong><em>Note: Ensure the field you have selected as the 'Asset Matching field' has a mapping. </em></strong></p><p><br></p><p>Complete mappings for all the AWS data you would like to be brought into Halo. </p><p><br></p><p id="isPasted"><strong><span style="font-size: 12pt;">Determine an Asset's type </span></strong></p><p>When assets are imported from AWS a new asset in Halo will be created, as AWS does not have a concept of 'asset types' like Halo we will need to configure how the type of new assets created from AWS are determined. This is done using the 'Determining an Asset's type' field. </p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjdlNGRhYWMyLTA5YzktNDhiZS05YzZmLTM1MzUyYjdiZWNkZCJ9.2gUNvvFqJNLR_usBXMMPwvcDE0RBdOwdFWulOaMeHXI" class="fr-fic fr-fil fr-dib" width="1217" style="width: 1219px; height: 456.344px;" height="456"></p><p><strong><span style="font-size: 10pt;">Fig 5. Settings to determine a new asset's type</span></strong></p><p><br></p><p><strong>Use the same type for all Assets </strong></p><p>If you would like all imported assets to have the same asset type when imported set the 'Determining an Asset's type' field to be 'use the same type for all Assets' then set the 'Default Asset Type' field to be the asset type you would like assets from AWS to be. </p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImZhYTY1NWNjLWNlNDAtNGIyYS05OWNjLTMyNjFiMTQ4Zjg5MCJ9.e47mE5T6ke1KJWGtzQ4PI7INxHdzkpGwNvqpxjcD7Qc" class="fr-fic fr-fil fr-dib" width="343" height="274"></p><p><strong><span style="font-size: 10pt;">Fig 6. Use same type for all assets</span></strong></p><p><br></p><p><strong>Use a field to determine each Asset's type </strong></p><p>If you would like all imported assets' types to be determined by a particular field, set the set the 'Determining an Asset's type' field to be 'Use a field to determine each Asset's type'. Then in 'Field for determining an Asset's type' choose the field you would like the type to depend on. The field you choose must contain the name of the desired asset type, if this name can be matched to an existing asset type in Halo, it will be assigned this asset type. If the name is not the same as an asset type in Halo, a new asset type will be created. Note that the names must be identical in order to match. This setting is used if you have a field in AWS that already determines an asset's type and you would like the types to be consistent between Halo and AWS. Instances that have field data but this data does not match an existing asset type in Halo will create a new asset type. Instances that do not have the selected field populated will create under the default asset type. </p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjAzNzRjMmJiLWY3ZjEtNGFlOS1hZDE5LWJlNGFkMzkwNmI0OCJ9._VY00-7_9pk7_ouRwXmlqVy_a4TwFV3ynjczj5urvWM" class="fr-fic fr-fil fr-dib" width="568" height="353"></p><p><strong><span style="font-size: 10pt;">Fig 7. Use field to determine an asset's type</span></strong></p><p> </p><p>In the figure 7 example new assets will be assigned to an asset type in Halo based on their 'Architecture' field. If the data in the Architecture field matches the name of an asset type in Halo this asset will be created under the matched asset type. If a match cannot be made a new asset type will be created, under the asset group 'Network Equipment'. If the asset does not have the 'Architecture' field populated the asset will be created under the default asset type, 'Application server'. </p><p><br></p><p><strong>Determine Asset type using rules </strong></p><p>If you would like asset types to be determined by asset rules set the set the 'Determining an Asset's type' field to be 'Determine asset type using rules'. Now you will be able to set asset's types based on rules, These rules are based on field values, and if matched will assign an asset to the chosen asset type. When creating a rule first add criteria for the rule, select the Halo field that you would like to base the criteria on, then set the rule type and the outcome needed in the field to match the rule. If an asset matches this rule it will be imported as this asset type. </p><p><br></p><p>If an asset is imported that does not match any of these rules, it will be created under the default asset type. Alternatively, if you would like to not import assets that do not match these rules, set the 'Default Asset type' to 'Don't import assets that do not match any rules'. </p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImIxYmNjYjBjLTdiNDQtNDYwNi1iYmQxLWJkMDNhZjZkYzkzOCJ9.QHTNGQ3vDup7RybaZG7evbuUsP-Tx7YUR0wPyrls7uk" class="fr-fic fr-fil fr-dib" width="1212" style="width: 1214px; height: 498.812px;" height="499"></p><p><strong><span style="font-size: 10pt;">Fig 8. Determine asset's type using rules</span></strong></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6Ijk1NGQ4MzM0LTQ0MzMtNGY4Mi1iNTlhLTc3MWI4MmY0ZThiYyJ9.BeIvdvDaYWluZO46tzQewNeUJEf0S2rJG-HH5rhtghk" class="fr-fic fr-fil fr-dib" width="546" height="544"></p><p><strong><span style="font-size: 10pt;">Fig 8a. Rule example to determine asset type</span></strong></p><p><br></p><p>In the figure 8 example instances that have an Asset Number starting with 'SERV-' will be created under the Server asset type. Instances that do not meet this criteria will not be imported. </p><p><br></p><p><strong><span style="font-size: 12pt;">Miscellaneous Asset import settings</span></strong></p><p><strong>Deactivate Assets in Halo when they are deleted from AWS (Halo Integrator only) -</strong> When enabled assets will be deactivated in Halo when they are deleted from AWS. This only comes into effect when instances are imported using the Halo integrator (not when importing manually).</p><p><strong>Don't create new Assets -</strong> When enabled new assets will not be created in Halo. Instances that match to a Halo asset will be updated but any instances that do not match will not be imported/created.</p><p><strong>Don't update the Asset type for existing or matched Assets -</strong> If enabled, any instances that match to an existing asset when importing will not update the existing asset with a different asset type from AWS. This allows you to change data that impacts the Halo asset type in AWS without it affecting the existing assets in Halo. </p><p><strong>Don't update the asset site for existing or matched assets-</strong> If enabled, any instances that match to an existing asset when importing will not update the existing asset with a new site. This allows you to change asset site rules without it affecting the existing assets in Halo. </p><p><br></p><p><strong><span style="font-size: 14pt;">Site Mappings</span></strong></p><p id="isPasted">AWS does not have a concept of sites or customers, so to determine which site an asset should be created against you can use site rules under the 'Sites' tab. These rules are based on field values, and if matched will assign an asset to the site of the mapping. For example if an asset in AWS has a field with a value 'x' it will be imported under a chosen site in Halo. To do this, add a site rule to the table, select the Halo site you would like the asset to go to, add to the criteria table. Here select the Halo field that you would like to base the criteria on, then set the rule type and the outcome needed in the field to match the rule. </p><p><br></p><p>You will also need to set a 'Default site' any assets that do not match a site rule will be assigned to the default site. </p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjBhNjM5ODczLTAzMzUtNGQ4MC04MDFmLTdmZWYyNzE0Y2JiMCJ9.sE6M4d7k_pfivtBowKwn7aXevLa3uQOpNwFxZH9duck" class="fr-fic fr-fil fr-dib" width="1217" style="width: 1219px; height: 565.134px;" height="565"></p><p><strong><span style="font-size: 10pt;">Fig 9a. Site rules</span></strong></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6Ijk5ZmQ4MzM5LTdmOGEtNGM0Ny04NzFmLWU4YzBjZjlhZTJmNyJ9.2faxoBJtMF6ZRPpxB2QArir1svDx8NRofwbZDeYMRdo" class="fr-fic fr-fil fr-dib" width="557" height="556"></p><p><strong><span style="font-size: 10pt;">Fig 9b. Site rule example</span></strong></p><p><br></p><p>In the figure 9 example instances that contain the string 'ACORN-LDN' in their 'Name' field will be assigned to the London HQ site for the customer Acorn Construction. Any other assets that do not meet this criteria will be assigned to the site Leeds under the customer St Johns High School. </p><p><br></p><p><strong><span style="font-size: 14pt;">Importing Instances</span></strong></p><p>Now you are ready to import instances. Head to the Assets tab and use the button 'Import Instances' to pull up the import preview screen. Here, you will see all the instances that will be imported. To begin the import hit start, this will create the instances as assets in your Halo instance. </p><p><br></p><p>To have instances import on a scheduled basis head to the 'Syncing' tab and enable the Halo Integrator for the AWS integration.</p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjBjY2M3ZmJlLWMyOGQtNDhlOS04N2IzLTU2Mjc4ZjkyYzc4MyJ9.M2cjwrN521nUz8qHP2srXuDeZBVukIvc4vmfobVAf20" class="fr-fic fr-fil fr-dib" width="1033" style="width: 1035px; height: 385.647px;" height="386"></p><p><strong><span style="font-size: 10pt;">Fig 10. Enable the Halo Integrator for the AWS integration</span></strong></p><p><br></p><p><strong><em>Note: On versions between v2.198 and v2.224 you will have an additional field to select which service to import instances from, you can choose to import EC2 and/or RDS instances.</em></strong></p><p><br></p><p>When enabled instances will be imported automatically on a daily basis. You can also see here if there are any errors with the import too. </p><p><br></p><p><strong>Deactivate Assets in Halo when they are deleted from AWS (Halo Integrator only) -</strong> Available from v2.224+. Enable this if you would like assets in Halo to be deactivated when the linked instance cannot be found (has been deleted from) AWS. This only applies when the Halo integrator executes the import, not when an import is manually run. </p>
