Add Agentless docs to serverless CSPM documentation

elastic / kibana

Your window into the Elastic Stack

https://www.elastic.co/products/kibana

Other

19.77k stars 8.17k forks source link

Add Agentless docs to serverless CSPM documentation #178859

Open maxcold opened 6 months ago

maxcold commented 6 months ago

User story As a user I want to be able to find information about Agentless CSPM so that I learn how to use it

Motivation

As we added Agentless setup option in CSPM for all cloud providers, we need to have documentation covering it. As Agentless is only supported in serverless projects atm, probably a good place for such docs is https://docs.elastic.co/serverless

Definition of done

[ ] Agentless CSPM documentation exists on one of the dcumentation resources

Out of scope

Related tasks/epics

Team tag

@elastic/kibana-cloud-security-posture

tinnytintin10 commented 6 months ago

@maxcold can you confirm that the limited credential option is the only change we need to make? Any new things we're adding to workflows that we'll need to document (like selecting the agentless / agent-based option)?

tinnytintin10 commented 6 months ago

cc @benironside

maxcold commented 6 months ago

@tinnytintin10 things to mention in the docs:

available credentials methods, for AWS direct and temporary access keys, for GCP JSON credentials, for Azure "Service Principle with Client Secret"
way to switch back to the Agent-based way, via Setup technology selector
while we don't have a visual way to confirm incoming data - how to make sure the data is being ingested
while we don't have the error handling, the way to troubleshoot, eg. via diagnostic file from the agentless agent