You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Once you roll your API token in Cloudflare, you can update the API token value in your compute account's secrets manager:
48
+
Once you roll your API token in Cloudflare, you can update the API token value in your secrets manager for [Amazon Web Services (AWS)](https://docs.aws.amazon.com/secretsmanager/latest/userguide/manage_update-secret-value.html) or [Google Cloud Platform (GCP)](https://cloud.google.com/secret-manager/docs/edit-secrets).
49
49
50
-
<Tabs> <TabItemlabel="Amazon Web Services (AWS)" >
51
-
52
-
1. In the AWS, open the [Secrets Manager](https://docs.aws.amazon.com/secretsmanager/latest/userguide/asm_access.html).
53
-
2. Choose **cloudflare-cds-secrets**.
54
-
3. Select **Retrieve secret value**, then select **Edit**.
55
-
4. Enter your Cloudflare API token.
56
-
5. Select **Save**.
57
-
58
-
For more information, refer to the [AWS Secrets Manager documentation](https://docs.aws.amazon.com/secretsmanager/latest/userguide/manage_update-secret-value.html).
59
-
60
-
</TabItem>
61
-
62
-
<TabItemlabel="Google Cloud Platform (GCP)" >
50
+
### Common token issues
63
51
64
-
1. In GCP, open the [Secret Manager](https://cloud.google.com/secret-manager/docs/overview).
65
-
2. Choose your compute account connected to CASB.
66
-
3. In **Actions**, select **Edit**.
67
-
4. Choose your Cloudflare secret, then select **Edit secret**.
68
-
5. Enter your Cloudflare API token.
69
-
6. Select **Update secret**.
52
+
#### `cloudflare-cds-secrets` does not exist in the compute account's secrets manager
70
53
71
-
For more information, refer to the [GCP Secret Manager documentation](https://cloud.google.com/secret-manager/docs/edit-secrets).
54
+
To recreate the secret in your compute account:
72
55
73
-
</TabItem> </Tabs>
56
+
1. Validate that you selected the correct region.
57
+
2.[Upgrade the compute account](#upgrade-a-compute-account) to recreate the secret.
58
+
3.[Update the secret value](#roll-api-tokens) in your compute account.
74
59
75
-
###Common token issues
60
+
#### I no longer have access to the Cloudflare API token I created
76
61
77
-
#### cloudflare-cds-secrets does not exist in the secrets manager
62
+
[Roll your Cloudflare API token](#roll-api-tokens) and add it to your compute account.
78
63
79
-
Validate that the correct region is selected
80
-
Rerun Terraform Apply to recreate the secret
81
-
Apply repeat the steps above to edit the secret's value
64
+
To validate your compute account's API access:
82
65
83
-
#### I no longer have access to the API token I created
84
-
85
-
Following the above instructions, roll the API token again and add it to AWS or GCP Secrets Manager
86
-
Validation: On the integration page, if the Compute Account is shown as "Healthy", the problem has been solved.
66
+
1. In [Zero Trust](https://one.dash.cloudflare.com/), go to **CASB** > **Integrations**.
67
+
2. Choose the integration you created for cloud scanning.
68
+
3. Select **Manage compute accounts**. If the status of the compute account integration is set to **Healthy**, the problem has been solved.
87
69
88
70
## Troubleshoot an unhealthy compute account
89
71
90
-
When a Compute Account becomes unhealthy, new scan configuration changes will not be put into use and new scan results will not appear in the dashboard.
91
-
92
-
The following steps should be used when a Compute Account is appearing with the "Unhealthy" badge within the CASB Integration page. Example:
93
-
94
-
Steps
95
-
Rerun Terraform Apply
96
-
Navigate to a directory that contains the Terraform state file created during previous Terraform activity for this Compute Account
97
-
Pull the latest updates:
98
-
terraform init --upgrade
99
-
Recreate/Upgrade any missing resources:
100
-
terraform apply
101
-
After completion, review the health status of the Compute Account to verify recovery. If the Compute Account is now healthy, you can stop here. Else, continue to the next step.
72
+
When CASB marks a compute account as **Unhealthy**, CASB will not use new scan configuration changes and new scan results will not appear in the dashboard.
102
73
103
-
Roll API Token
104
-
Follow the steps listed in "Rotating API Tokens" section
105
-
Review the health status of the Compute Account to verify recovery.
74
+
To fix a compute account marked as **Unhealthy**, first [upgrade the compute account](#upgrade-a-compute-account). If the compute account is still unhealthy, [roll your API token](#roll-api-tokens).
0 commit comments