Skip to content

[meta][CDR] Update AWS Config integration to Leverage Native CDR Workflows #15231

@kcreddy

Description

@kcreddy

As part of effort to leverage Cloud Detection and Response (CDR) workflows such as Elastic CSPM and CNVM for 3rd party integrations, both misconfigurations findings data from Elastic AWS Config integration needs to be enriched just like previous enhancements for AWS SecurityHub.

For this work, the aws.config data stream which ingests misconfigurations findings must be enriched to support Elastic CSPM workflow.

Tasks:

Success Criteria

The misconfigurations findings from AWS Config integration should be part of the data view suggested and mapped to the ECS schema supported by Cloud Security features.
To develop ES and Kibana assets (transforms, ingest pipelines, data views, etc.) required to make the data from AWS Config integration available in the Cloud Security features.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions