-
Notifications
You must be signed in to change notification settings - Fork 471
aws_inspector: add note about AWS Permissions and Role ARN support #11794
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
aws_inspector: add note about AWS Permissions and Role ARN support #11794
Conversation
Pinging @elastic/security-service-integrations (Team:Security-Service Integrations) |
🚀 Benchmarks reportPackage
|
Data stream | Previous EPS | New EPS | Diff (%) | Result |
---|---|---|---|---|
route53_resolver_logs |
5128.21 | 4016.06 | -1112.15 (-21.69%) | 💔 |
vpcflow |
7518.8 | 5235.6 | -2283.2 (-30.37%) | 💔 |
cloudwatch_logs |
500000 | 333333.33 | -166666.67 (-33.33%) | 💔 |
elb_logs |
5524.86 | 3968.25 | -1556.61 (-28.17%) | 💔 |
firewall_logs |
3289.47 | 2659.57 | -629.9 (-19.15%) | 💔 |
To see the full report comment with /test benchmark fullreport
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This does need a changelog entry, otherwise it won't be presented to users in the visible documentation.
/test |
1 similar comment
/test |
💚 Build Succeeded
History
|
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@chemamartinez , you can remove the Note
from the PR description since you have the changelog entry.
Package aws - 2.31.4 containing this change is available at https://epr.elastic.co/package/aws/2.31.4/ |
…11794) Warn about required permissions and role ARN setting in AWS Inspector docs.
…lastic#11794) Warn about required permissions and role ARN setting in AWS Inspector docs.
…11794) Warn about required permissions and role ARN setting in AWS Inspector docs.
…lastic#11794) Warn about required permissions and role ARN setting in AWS Inspector docs.
Proposed commit message
inspector2:ListFindings
is a required AWS permission for IAM users in order to avoid this error when enabling the Inspector data stream:See https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoninspector2.html.
It also clarifies that
Role ARN
, which is a global setting for the AWS integration, is not supported for the Inspector data stream as it make requests to the Inspector API through HTTPJSON, whileRole ARN
is a setting for AWS-based inputs.Checklist
changelog.yml
file.