How a query should like to see how many EC2-Classic and how many EC2-VPC instances I have under selected connector?
Yes, just append the aws.ec2.instanceState query:
provider:"AWS" and aws.ec2.instanceState:"RUNNING" and aws.ec2.vpcId:*
provider:"AWS" and aws.ec2.instanceState:"RUNNING" and not aws.ec2.vpcId:*
For EC2-VPC, try: provider:"AWS" and aws.ec2.vpcId:*
For EC2-Classic, try: provider:"AWS" and not aws.ec2.vpcId:*
Brilliant! Thank you Shyam.
Do you know how to limit the results only to running instances?
Is it possible to get account names where EC2-Classic instances were found?
Account name? Did you mean AWS account id?
I mean connector name in Qualys.
Just need to know where we still use EC2-Classic instances.
Not the connector name, but you have the AWS account ID.
That tells you where you're still running classic instances.
Thank you, understand now. I also have tags named the same as connector name so it shows me exactly what I need. Thanks again!
Retrieving data ...