USM Anywhere™

Quick Start Guide for GCP Sensor

Pre-installation Checklist

Cloud Deployment Manager template provided by AT&T Cybersecurity to create all required Google Cloud Platform (GCP) resources for deployment, including an instance, volume, and firewall rules for use by the USM Anywhere Sensor instance.
Privileged user account in GCP with Compute Engine permissions, permission to create and edit service accounts, as well as write permission to the Deployment Manager.
A standard instance with 2 vCPUs and 7.5 GB of memory.
Zonal SSD persistent disk 50GB to have reliable network storage that your instances can access like physical disks. A 50GB volume is designated as the default size for optimal performance.
Internet connection to the USM Anywhere secure cloud. See Sensor Ports and Connectivity for more information.
Enable required APIs to allow the features dependent on them to operate as designed. See Enable Required APIs for more information.
Create a new service account. The sensor deploys with the created service account and then USM Anywhere grants permissions to other projects.
If the pre-defined roles Project: Viewer and Pub/Sub: Pub/Sub Subscriber are too broad for your use, or are otherwise unsuitable for you, you can define a new role whose access is limited according to your needs. See Creating a Custom Role for more information.
Keep the SSH private key and provide the public key to the sensor.

GCP Sensor Deployment

See GCP Sensor Deployment for detailed information about how to deploy a GCP Sensor. The main steps are outlined below:

1 Prepare Your GCP Environment

You must complete both of the following tasks before deploying a GCP Sensor in your environment:

Enable Required APIs to allow the features dependent on them to operate as designed. See Enable Required APIs for more information.
Create a new service account. The sensor deploys with the created service account and then USM Anywhere grants permissions to other projects. See Create a New Service Account for more information.

2 Create the Sensor

You must create a new sensor in the GCP console. Launch the USM Anywhere product from the GCP console using the Google Cloud Deployment Manager template.