Configure auto-provisioning where Auto Scaling Group and SMS are in different AWS accounts.

Smorales — Thu, 06 Mar 2025 21:15:39 GMT

Hi guys,

I'm doing a lab and I want to auto-provisioning an Auto Scaling Group to a SMS.

The ASG and the SMS are in two different AWS accounts, we have connectivity between ASG and SMS, but I have a doubt about the step of add a controller in the CME.

This is my topology:

I will use an IAM user to perform this,

I was reading the documentation https://sc1.checkpoint.com/documents/IaaS/WebAdminGuides/EN/CP_CME/Content/Topics-CME/CME_Structure_and_Configurations.htm?TocPath=CME%20Structure%20and%20Configurations%7CControllers%20(accounts)%7C_____0#Controllers_(accounts) and I tought this command is what I need:

autoprov_cfg add controller AWS -cn <NAME> -r <eu-west-1> -iam -sn <SUB-ACCOUNT-NAME> -sak <SUB-ACCOUNT-ACCESS-KEY> -ssk <SUB-ACCOUNT-SECRET-KEY>

My doubt is: These "-sn <SUB-ACCOUNT-NAME> -sak <SUB-ACCOUNT-ACCESS-KEY> -ssk <SUB-ACCOUNT-SECRET-KEY>" parameters where do I get them from?

I understand -sak and -ssk I can generate them from IAM service like this:

but I don't quite understand if the -sn parameter I have to enter any value or I need something from AWS.

Do you know if is a parameter that I can get from IAM in AWS or is a generic parameter that I can put?

Re: Configure auto-provisioning where Auto Scaling Group and SMS are in different AWS accounts.

_Val_ — Mon, 10 Mar 2025 07:51:45 GMT

@Shay_Levin can you please assist?

Re: Configure auto-provisioning where Auto Scaling Group and SMS are in different AWS accounts.

Shay_Levin — Mon, 10 Mar 2025 09:10:29 GMT

Hi, this parameter is not must , providing just the Access-Key and Secret would be enough

topic Re: Configure auto-provisioning where Auto Scaling Group and SMS are in different AWS accounts. in Cloud Firewall

Configure auto-provisioning where Auto Scaling Group and SMS are in different AWS accounts.

Re: Configure auto-provisioning where Auto Scaling Group and SMS are in different AWS accounts.

Re: Configure auto-provisioning where Auto Scaling Group and SMS are in different AWS accounts.