Workspace Overview
This topic describes the following details about workspaces:
Actions you can do:
- Creating a Workspace: Workspaces are top-level workbenches in SecMaster. A workspace can be associated with general projects, regions, and enterprise projects to meet different security operations needs. Before using baseline inspection, alert management, security analysis, and security orchestration in SecMaster, you need to create at least one workspace first. You can use workspaces to group your resources by application scenario. This will make security operations more efficient.
- Viewing a Workspace: You can view the details about a workspace, including its name, type, and creation time.
- Editing a Workspace: You can modify the workspace basic settings, including its name and description.
- Deleting a Workspace: If you no longer need a workspace, you can delete it. After a workspace is deleted, SecMaster may be unable to detect security risks of assets managed in the workspace. So the risk of those assets may fail to be prevented. Deleted workspaces cannot be restored. Exercise caution when performing this operation.
- Managing Workspace Tags: After creating a workspace, you can add, edit, and delete tags configured for the workspace. A tag consists of a key-value pair. Tags are used to identify, and classify workspaces. Workspace tags are used for workspace management only.
- Creating a Workspace Agency: You can create a workspace agency to perform cross-account secure operations. In this way, you can centrally view asset risks, alerts, and incidents in workspaces of other users. You can create agencies to authorize other users to manage your workspaces in a project. In this way, asset risks, alerts, and incidents across workspaces can be centrally managed for security operations.
- Managing Agencies: On the Agencies page, you can manage agency views, workspaces you are managing for others, and agencies managing your workspaces.
- Agency Views: On this tab, you can view all agency views you create and their details. You can view, edit, modify, and delete an agency view, as well as delete agency views in batches.
- Workspaces Managed by Me: On this tab, you can view workspaces managed in the agency view you create. You can check tasks managed by you and task parameters, and manage (accept, reject, release, and delete) tasks managed by you.
- My Workspaces Managed by Others: On this tab, you can view which agency views are managing workspaces you create. You can view parameters related to the agency views, modify accepted agency tasks, withdraw accepted agency tasks, request for agencies again, release an agency, and delete agency tasks.
General Rules for Workspaces
- Paid SecMaster: A maximum of five workspaces can be created for an account in a region.
- Free SecMaster: Only one workspace can be created for an account in a region.
- Permanent deletion of workspaces: Workspaces are deleted immediately and cannot be restored.
- Workspace agencies:
- A maximum of one workspace agency view can be created for an account in a region.
- A maximum of 150 workspaces from different regions and accounts can be managed by a workspace agency view.
- A maximum of 10 agencies can be created for an account.
- Currently, performing operations across different workspaces in multiple browser windows at the same time is not supported.
How to Plan Workspaces You Need
You can plan workspaces based on the following principles:
- By project: Create one workspace for each IAM project or sub-project. A project is created for a region to isolate resources (including compute, storage, and network resources) across physical regions. Sub-projects can be created in a project. The recommended number of workspaces in a region is the total number of projects and sub-projects. SecMaster supports only IAM projects. Enterprise projects are not supported. For more information about projects, see Project Management.
For example, if region A has project A, and subprojects A1 and A2 are created in project A, you are advised to create three workspaces in region A to manage project A, subproject A1, and subproject A2, respectively.
- By log source: If you want to manage logs of different cloud services separately, you can plan the number of workspaces based on the cloud service log classification.
No matter how you plan workspaces, by project or log source, the following constraints must be met:
- With paid SecMaster, a maximum of five workspaces can be created for an account in a region.
- With free SecMaster, only one workspace can be created for an account in a region.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.