Aqua Wave CSPM Events can be configured to send alerts based on the API action (e.g. "s3:CreateBucket" or "ec2:DeleteInstance").

To enable Event alerts, follow the steps below

Step 1: Ensure your cloud account is enrolled in Events and Aqua Wave CSPM is receiving data

• Follow the connection setup steps if your account is not yet enrolled
• Use the "Event Connection Wizard" page to see the last time the account has received an event
  

Step 2: Create an Event alert

• Navigate to the "Alerts" page
• Click the "Events" tab at the top
• Click the "Create Alert" button at the top right
  
• In the popup box, use the fields to configure the alert criteria. You can select multiple fields by holding "Shift" when clicking.
  

Step 3: View your existing Event alerts

• Navigate to the "Alerts" page
• Click the "Events" tab at the top
• Use the search and filter to locate your event alerts.