Planting an EC2 honeypot seed
How to manually plant a EC2 honeypot type seed in your AWS tenant
Last updated
How to manually plant a EC2 honeypot type seed in your AWS tenant
Last updated
Our EC2 honeypot seeds offer a range of great detection capabilities, deployed directly within your AWS tenant. You can read more about what they are, and how they work, here:
This page will show you have to do a full deployment of an EC2 seed
Follow the clicks on the video, or the bullet points below
Go to DEPLOYMENTS
Click ADD NEW
Give your new deployment a NAME and a DESCRIPTION that will help you identify it later
Chose your desired personality from the published selection of EC2 honeypot SEED TYPES
Select MANUAL as the destination, then click SUBMIT to create and run your new deployment
Click into your new deployment to view details and see the new seed created as status=available
On the right side of your new seed, click the actions menu [...] then click PLANT
Provide a LOCATION and DESCRIPTION to help you understand where you planted this seed later, then click SUBMIT
You will be presented with an AWS Cloudformation link. Click (or copy-paste) the URL.
A new tab showing AWS cloudformation will open. You may be asked to authenticate to AWS if you have not already done so.
Make sure to chose the correct AWS account and region for deployment of your seed before going on to the next step
Select the SECURITY GROUP that you wish to apply to this Honeypot, and chose the appropriate SUBNET ID that you wish to deploy it in to, then click CREATE STACK to start the installation
Click on RESOURCES to see the ID of the new EC2 Honeypot. Take this link if you would like to see more details such as status and IP addresses
Return to the seedata.io tab and you'll see the status of you honeypot gets updated from "Waiting for heartbeat" to "GOOD" within a minute or so