Cloud Rogues - AWS Integration

Windows and Linux agents are supported on AWS EC2 instances also, however, the requirements and install steps differ depending on what OS and architecture you plan on installing (you need to install on each environment)

Here is the general system requirements to get you started high level:
https://support.sentinelone.com/hc/en-us/articles/360004196614-System-Requirements

--> If the EC2 instance is Windows:

Here are the Windows agent requirements:
https://support.sentinelone.com/hc/en-us/articles/4410565200151-Agent-Requirements-on-Windows

and the agent install steps (including if VDI infrastructure is involved):
https://support.sentinelone.com/hc/en-us/articles/360004212754-Installing-the-Windows-Agent
https://support.sentinelone.com/hc/en-us/articles/360035087333-Installing-Windows-Agents-on-VM-or-VDI


--> If the EC2 instance is Linux:

Here are the Linux agent requirements:
https://support.sentinelone.com/hc/en-us/articles/4410580891543-Agent-Requirements-on-Linux

and the agent install steps:
https://support.sentinelone.com/hc/en-us/articles/4414520321047-Installing-the-Linux-Agent


--> If the EC2 is Linux AND on Graviton (ARM processor), this would apply:
https://support.sentinelone.com/hc/en-us/articles/4751111406359-22-1-Linux-ARM-Agent-Release-Notes

=========================================

This can be achieved by using AWS Systems Manager.
 
Here are the steps:

1. Ensure that your EC2 instances are instantiated from base AMIs that include the Systems Manager binary files.
2. Each endpoint must have the proper Identity and Access Management (IAM) permissions to let communication flow with AWS Systems Manager. Example: AmazonSSMManagedInstanceCore or AmazonEC2RoleforSSM.
3. In AWS, the IAM Role/Permissions include the ec2:DescribeTags permission. This permission will let the SentinelOne Agent access the Metadata Tag information that is connected with the instance.
4. In the Document section of AWS Systems Manager, search for AWS-RunShellScript (for Linux) or AWS-RunPowerShellScript (for Windows) and select it.
5. In the Parameters section, paste the contents of the example Agent installation script into the Commands textbox.
6. In Target selection, select the EC2 instance. The script is run on any EC2 instance with a matching tag key/value pair.
7. Click Specify Instance tags.
8. From Advanced options, choose a Compliance Severity.
9. Click Create Association. This association runs the Agent installation script against any EC2 instance with matching target tags, both present and future.

 
For more detailed instructions, you can refer to these articles: Installing the Linux Agent with the AWS Systems Manager and Installing the Windows Agent with the AWS Systems Manager.