previous
NEW SERVICES
Azure SAML Certificates
use case: the certs we use for SSO are stored in the SAML certificates. we wanted to enumerate the expiration date of those certs and the thumb prints. this is so we could build a report ot find out which of our SSO certs were going to expire so we could rotate them before outage
The object Azure AD Service Principal Certificate is added to collect certificates.
Amazon Cognito
about this feature: Amazon Cognito is designed for developers who want to add user management and sync functionality to their mobile and web apps. Developers can use Cognito Identity to add sign-up and sign-in to their apps and to enable their users to securely access their app's resources.
use case from customer: I was trying to see what user pools we had created. I've never used the Cognito Service before but had the request from the SOC to see if we had logs for Cognito flowing in. I also wanted to see if the Cognito user pools had any information forwarded to CloudTrail to enable our SOC during investigations for if we have a security incident relating to Cognito.
We've gone live with our new product in which we support adding users in our new product to Cognito so I would also like to see a count of users but we need to tread the line carefully not have PII stored within CloudAware to HIPAA compliance in the future
Spring '24 Release
Requester Pays data for AWS S3 Buckets is available in CMDB
Cloudaware extends visibility into Amazon S3 service, supporting Requester Pays feature for S3 buckets. In AWS S3, bucket owners typically incur storage and data transfer costs. Alternatively, owners can enable 'Requester Pays', shifting request and download expenses to the requesters. FinOps can determine the bucket's payer by comparing its resource ID with the AWS account IDs that access it.
Cloudaware fetches payer data from billing files to enrich S3 details in CMDB. Customers can utilize Cloudaware CMDB to review the payer information at the bucket level. More about Requester Pays for S3 buckets here.
NEW SERVICES
CloudWatch Agent
The Amazon CloudWatch Agent is a lightweight and flexible monitoring agent provided by Amazon Web Services (AWS) that allows you to collect and publish system-level metrics, logs, and custom metrics from your EC2 instances to Amazon CloudWatch.
Cloudaware adds support for Amazon CloudWatch Agent to collect memory utilization data for EC2 instances. The data is available on an instance level and can be used for reports and dashboards.
UPDATED SERVICES
AWS CloudWatch Logs
NEW INTEGRATIONS
Winter '24 Release
NEW SERVICES
Amazon Cognito
Amazon Cognito helps developers add user management and sync features to mobile and web apps. Using Amazon Cognito, developers easily integrate sign-up, sign-in, and secure user access to app resources.
Cloudaware supports Amazon Cognito, allowing customers to track and report information related to identity & user pools. Customers can enable investigations in case of a security incident relating to Cognito.
AWS Verified Access
Customers leveraging AWS Verified Access can determine the usage and location of this service by examining associated trust providers, groups, instances, and endpoints
Azure Cognitive Services
Customers who use Azure Speech to Text service can now leverage the visibility of the Azure AI Account and Azure AI Deployment objects in CMDB.
Azure Policy
Cloudaware supports Azure Policy service and adds the following objects:
Azure Policy Definitions
Azure Policy Set Definitions
Azure Policy Assignment
Azure Policy Exemption
Azure Policy Remediation
Azure Policy Attestation
Azure Cognitive ServicesCusotmers who use Azure Speech to Text service can now leverage the visibility of objects Azure AI Account and Azure AI Deployment in CMDBSAML Certificates
Cloudaware adds the object Azure AD Service Principal Certificate to gather information about certificates. Customers using SAML certificates for SSO can track the expiration date of certificates and rotate them before expiry.
UPDATED SERVICES
AWS CloudWatch Logs
Objects Delivery, Delivery Destination, Delivery Source and Destination are added. These objects can now also be tagged Customers can tags these objects in Cloudaware Tag Analyzer.
NEW INTEGRATIONS
Tenable Security Center
Cloudaware maps vulnerabilities from Tenable Security Center to such CMDB CIs as AWS Network Interface, Azure Network Interface, and Physical Server. This enhanced visibility empowers SecOps teams to perform more focused incident response actions, improving the organization’s security. Customer Customers can prioritize remediation efforts by leveraging relevant vulnerability context for IT assets.
AppDynamics
Guide https://cloudaware.atlassian.net/wiki/spaces/DOCS/pages/3601039397/AppDynamics
UPDATED INTEGRATIONS
2023 Q4
AWS Verified Access
Jira Legacy | ||||||
---|---|---|---|---|---|---|
|
AppDynamics integration
Jira Legacy server System Jira serverId 07b36f99-3234-3cba-b547-b0a0b265c9d4 key ROAD-135
+ 2024 Q1
Oracle Cloud Compute service support
Jira Legacy | ||||||
---|---|---|---|---|---|---|
|
2024 Q2
Update Conflux
Jira Legacy | ||||||
---|---|---|---|---|---|---|
|
AWS S3 Update
Jira Legacy | ||||||
---|---|---|---|---|---|---|
|
Snyk support
Jira Legacy | ||||||
---|---|---|---|---|---|---|
|
2024 Q3
New Relic update
Jira Legacy | ||||||
---|---|---|---|---|---|---|
|
Azure PostgreSQL/MySQL update
Jira Legacy | ||||||
---|---|---|---|---|---|---|
|
Azure CIS Benchmarks 2.0.0
Jira Legacy | ||||||
---|---|---|---|---|---|---|
|
Alibaba Cloud support Jira Legacy