Aqua Wave CSPM Events can be configured to send alerts based on the API action (e.g. "s3:CreateBucket" or "ec2:DeleteInstance").
To enable Event alerts, follow the steps below
Step 1: Ensure your cloud account is enrolled in Events and Aqua Wave CSPM is receiving data
- Follow the connection setup steps if your account is not yet enrolled
- Use the "Event Connection Wizard" page to see the last time the account has received an event
Step 2: Create an Event alert
- Navigate to the "Alerts" page
- Click the "Events" tab at the top
- Click the "Create Alert" button at the top right
- In the popup box, use the fields to configure the alert criteria. You can select multiple fields by holding "Shift" when clicking.
Step 3: View your existing Event alerts
- Navigate to the "Alerts" page
- Click the "Events" tab at the top
- Use the search and filter to locate your event alerts.