Winter '24 Release
NEW SERVICES
Amazon Cognito
about this feature: Amazon Cognito is designed for developers who want to add user management and sync functionality to their mobile and web apps. Developers can use Cognito Identity to add sign-up and sign-in to their apps and to enable their users to securely access their app's resources.
use case from customer: I was trying to see what user pools we had created. I've never used the Cognito Service before but had the request from the SOC to see if we had logs for Cognito flowing in. I also wanted to see if the Cognito user pools had any information forwarded to CloudTrail to enable our SOC during investigations for if we have a security incident relating to Cognito.
We've gone live with our new product in which we support adding users in our new product to Cognito so I would also like to see a count of users but we need to tread the line carefully not have PII stored within CloudAware to HIPAA compliance in the future.
AWS Verified Access
Customers leveraging AWS Verified Access can identify if and where this service is being used by checking related trust providers, groups, instances, and endpoints.
Azure Cognitive Services
Customers who use Azure Speech to Text service can now leverage the visibility of the Azure AI Account and Azure AI Deployment objects in CMDB.
Azure Policy
Cloudaware supports Azure Policy service and adds the following objects:
Azure Policy Definitions
Azure Policy Set Definitions
Azure Policy Assignment
Azure Policy Exemption
Azure Policy Remediation
Azure Policy Attestation
Azure SAML Certificates
use case: the certs we use for SSO are stored in the SAML certificates. we wanted to enumerate the expiration date of those certs and the thumb prints. this is so we could build a report ot find out which of our SSO certs were going to expire so we could rotate them before outage
The object Azure AD Service Principal Certificate is added to collect certificates.
UPDATED SERVICES
AWS CloudWatch Logs
Objects Delivery, Delivery Destination, Delivery Source and Destination are added. These objects can now also be tagged in Cloudaware Tag Analyzer.
NEW INTEGRATIONS
Tenable Security Center
Cloudaware maps vulnerabilities from Tenable Security Center to such CMDB CIs as AWS Network Interface, Azure Network Interface, and Physical Server. This enhanced visibility empowers SecOps teams to perform more focused incident response actions, improving the organization’s security. Customer can prioritize remediation efforts by leveraging relevant vulnerability context for IT assets.
AppDynamics
Guide https://cloudaware.atlassian.net/wiki/spaces/DOCS/pages/3601039397/AppDynamics
+ 2024 Q1
Oracle Cloud Compute service support ROAD-140 - Getting issue details... STATUS
2024 Q2
Update Conflux ROAD-139 - Getting issue details... STATUS
AWS S3 Update ROAD-144 - Getting issue details... STATUS
Snyk support ROAD-146 - Getting issue details... STATUS
2024 Q3
New Relic update ROAD-141 - Getting issue details... STATUS
Azure PostgreSQL/MySQL update ROAD-142 - Getting issue details... STATUS
Azure CIS Benchmarks 2.0.0 ROAD-143 - Getting issue details... STATUS
Alibaba Cloud support ROAD-147 - Getting issue details... STATUS