Aqua Wave CSPM Events can be configured to send alerts based on the API action (e.g. "s3:CreateBucket" or "ec2:DeleteInstance").


To enable Event alerts, follow the steps below


Step 1: Ensure your cloud account is enrolled in Events and Aqua Wave CSPM is receiving data


Step 2: Create an Event alert

  • Navigate to the "Alerts" page
  • Click the "Events" tab at the top
  • Click the "Create Alert" button at the top right
  • In the popup box, use the fields to configure the alert criteria. You can select multiple fields by holding "Shift" when clicking.


Step 3: View your existing Event alerts

  • Navigate to the "Alerts" page
  • Click the "Events" tab at the top
  • Use the search and filter to locate your event alerts.