Help Center/ SecMaster/ User Guide/ Resource Manager/ Overview
Updated on 2026-10-10 GMT+08:00
View PDF
Share

Overview

With SecMaster, you can centrally manage cloud assets and off-cloud assets. You can view the security status statistics for all resources under your account. This helps you quickly locate security risks and find solutions.

  • Cloud resources are your assets on Huawei Cloud, including Elastic Cloud Servers (ECSs) on the Servers tab, websites protected with Web Application Firewall (WAF) on the Websites tab, Relational Database Service (RDS) databases on the Data tab, and Virtual Private Clouds (VPCs) on the Network Resources tab.
    Table 1 Asset types that can be viewed

    Tab

    Asset Description

    All Resources

    On this tab, you can view all assets, including cloud and on-premises assets.

    Cloud Resources

    On this tab, you can view all your assets on the cloud, including servers, protected websites, networks, and data assets on the cloud.

    Servers

    This tab displays information about cloud and on-premises servers.

    • Servers: such as ECSs
    • AI components:

      A company may have hundreds, or even thousands of servers running in its IT environment. The information about the ports, accounts, software, and other assets on the servers often change due to O&M operations, making it difficult for O&M personnel to track them in real time. Unmonitored assets and security blind spots may be exploited by attackers and incur risks.

      HSS server fingerprint management collects important asset information on servers, including their accounts, open ports, processes, AI components, software, auto-started items, web applications, web services, web frameworks, websites, middleware, kernel modules, and databases, to help you learn the asset status of each server, improve O&M efficiency, and eliminate security blind spots.

      Generative AI components on servers are called AI components, including AI applications and tools.
      • AI application information: server name and IP address, application version, process ID, startup path, parent process ID, running user, listening information, startup time, startup command line, first scan time, and latest scan time
      • AI tool information: server name and IP address, tool version, installation path, first scan time, and last scan time

    Websites

    This tab displays cloud and on-premises website assets.

    For example, Web Application Firewall (WAF).

    Network Resources

    This tab displays cloud and on-premises network assets.

    For example, Virtual Private Cloud (VPC).

    Data

    This tab displays object storage and database assets, including cloud and on-premises data assets.

    • Object storage: For example, Object Storage Service (OBS).
    • Database: For example, Relational Database Service (RDS).

    Service Systems & Departments

    This tab displays the Department and Service System information of an asset.
  • Off-cloud resources are your assets outside our cloud (Huawei Cloud), including on-premises servers, IDC servers, or servers on third-party cloud platforms.
Table 2 Resource management

Resource Management

Function Description

Cloud Resource

Off-cloud Resource

Configuring the Asset Subscription

SecMaster can automatically synchronize information about assets on the cloud based on your configuration.

Supported

Not supported

Viewing Asset Information

You can view the asset name, type, protection status, and other details.

Supported

Supported

Importing and Exporting Assets

You can import or export asset information in batches.

Supported

Supported

Editing or Deleting an Asset

You can edit the department, service system, and owner of an asset.

Supported

Supported

Editing or Deleting an Asset

You can delete off-cloud assets you imported into SecMaster from the Resource Manager page if you no longer need them. Only off-cloud assets can be deleted. Assets on the cloud cannot be deleted.

Not supported

Supported

Differences Between Managing Cloud Assets and Off-Cloud Assets

  • For assets on our cloud, you can use asset subscription to quickly synchronize their information to SecMaster. For assets outside our cloud, they can only be imported into SecMaster for management.
  • For assets on our cloud, their information in SecMaster cannot be deleted. You can delete information about assets outside our cloud.

Notes and Constraints

  • After asset subscription, you can click Synchronize Assets on the Resource Manager page to synchronize asset information again. The basic edition allows you to synchronize assets one time per day, and the standard or professional edition allows you to synchronize assets 20 times per day. If you exceed this threshold, the system displays error message "Insufficient resource synchronization quota." In this case, synchronize assets again the next day.
  • Only the following assets can be synchronized in the AF-Cairo, CN East-Qingdao, and CN North3 regions.
    Table 3 Asset sources and corresponding security products

    Asset Type

    Asset Name

    Source

    Security Product

    Cloud resource

    Servers

    Elastic Cloud Server (ECS)

    Host Security Service (HSS)

    Cloud resource

    Websites

    Web Application Firewall (WAF)

    WAF

    Cloud resource

    Databases

    Relational Database Service (RDS)

    Database Security Service (DBSS)

    Cloud resource

    VPC

    Virtual Private Cloud (VPC)

    Cloud Firewall (CFW)

    Cloud resource

    EIP

    Elastic IP (EIP)

    CNAD Basic (Anti-DDoS)

    Off-cloud resource

    Device

    Off-cloud assets include on-premises servers, IDC servers, servers on third-party cloud platforms. In a word, off-cloud assets include assets that are not on Huawei Cloud.

    --
    NOTE:

    After the asset information is synchronized to SecMaster, the protection statuses of assets will be displayed on the SecMaster console. The protection statuses are as follows:

    • If Protection Status for an asset is Protected, the corresponding security product has been enabled for the asset.
    • If Protection Status for an asset is Unprotected, the corresponding security product has not been purchased or enabled for the asset. If you want to protect target assets, purchase corresponding security products and enable protection. For example, if you want to protect ECSs using HSS, purchase HSS and enable HSS for each ECS.

      For details about security products, see HSS Operation Guide, WAF Operation Guide, DBSS Operation Guide, CFW Operation Guide, and Anti-DDoS Operation Guide.

    • If Protection Status for an asset is Not supported, the corresponding security product is not supported in the current region.
    • If Protection Status for an asset is Partially protected, protection has been enabled for only some of the assets.
Parent topic: Resource Manager