Page Comparison

alb, elb

Ensure that that logging for ALB/ELB is on and logs are being stored in S3 Bucket. Grant Cloudaware with access to this bucket (s3:GetObject and s3:ListObject permissions)

aws-config

Enable AWS Config as described https://docs.aws.amazon.com/config/latest/developerguide/getting-started.html in AWS Documentation

Ensure that Cloudaware has been granted with the permission config:Des* (or config:DescribeDeliveryChannels as minimum)

billing

Ensure that your billing integration is set up according to the guide (AWS account Cloudaware AWS Billing Guide (your billing is consolidated under AWS account and S3 bucket where billing files are stored should be present in be added to Cloudaware)

cloudfront

Enable logging as described herein this external guide

Ensure that logs are being stored in S3 bucket. Grant Cloudaware with access to this bucket (s3:GetObject and s3:ListObject permissions)

cloudtrail

Ensure CloudTrail is enabled and the CloudTrail data is accessible (the bucket should be present to Cloudaware)

eks-logs

Ensure Amazon EKS is enabled as described https://docs.aws.amazon.com/eks/latest/userguide/control-plane-logs.htmlin AWS Documentation

Ensure that Cloudaware has been granted with permissions logs:DescribeLogGroups, logs:DescribeLogStreams, logs:GetLogEvents

aws-rds

Cloudaware tracks RDS logs in both CloudWatch and events from DB instance. Ensure that Cloudaware has the following permissions*:For

• for logs from CloudWatch: logs:DescribeLogGroups, logs:DescribeLogStreams, logs:GetLogEvents

• for logs from DB instance: rds:DescribeDBInstances, rds:DescribeDBLogFiles, rds:DownloadCompleteDBLogFile, rds:DownloadDBLogFilePortion

*These permissions are predefined in Cloudaware Conflux Collector policy.

route53

Ensure that logging for DNS Queries is enabled : https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/query-logs.html#query-logs-configuringas described in AWS Documentation

s3-access-logs

Ensure that logging for S3 is enabled https://docs.aws.amazon.com/AmazonS3/latest/user-guide/server-access-logging.htmlas described in AWS Documentation

vpc-flow-logs

Ensure that logging for network interface of VPC is enabled : https://aws.amazon.com/blogs/aws/vpc-flow-logs-log-and-view-network-traffic-flows/ as described in AWS Documentation

waf-logs

Ensure that WAF logs are being stored in S3 Bucket. Grant Cloudaware with access to this bucket (kinesis:DescribeStream and kinesis:ListStreams permissions should be in place, along with s3:ListBucket and s3:GetObject)

azure-activity

Ensure that the Reader role has been assigned to Cloudaware based on the guide Cloudaware Azure Start Guide

azure-billing

Ensure that your billing integration is set up according to the guide Cloudaware Microsoft Azure Billing Guide

azure-flowlogs

Ensure that a custom role has been created for Cloudaware to have 'read' access to Storage Account keys (Microsoft.Storage/storageAccounts/listKeys/action permission)

google-audit-

Ensure that Cloud logging is enabled : https://cloud.google.com/logging/docs/audit/as described in Google Cloud Documentation