Amazon Web Services (AWS)
Version: Amazon Web Services (AWS).
Amazon Web Services (AWS) is a collection of remote computing services (also called web services) that together make up a cloud computing platform, offered over the internet by Amazon.com. Netsurion Open XDR helps to monitor events from AWS using CloudTrail. This is achieved by creating some necessary reports, alerts, and dashboards. Reports will contain a detailed overview of the activities like login/ logout, login failed, network interface activity, bucket activity, security group activity, and user management activities.
Alerts will be triggered when a critical security event is detected as login failed, user deleted, or network interface deleted. The dashboard provides a visual representation of all the CloudTrail events in a categorized view. This includes graph pattern, tabular pattern, map, and meter gauge. Once events are received into Netsurion Open XDR , Reports, Knowledge Objects, Categories and Dashboards can be configured into Netsurion.
Netsurion Open XDR monitors all the Amazon Web Services events from services like Amazon EC2 and Amazon VPC, they are given as below:-
- Security – Login failed, Network interface deleted, User removed, Security group activity
- Compliance – Policy activity, User-Management activity
- Operation – Login success, Bucket-Object activity, Network Interface created
To take advantage of this data source integration and to learn more about alerts, reports, and dashboards, contact your Technical Account Manager (TAM). If you are not currently a Netsurion customer or partner, contact us to learn more.