AWS CloudTrail/CloudWatch Logs
Table of contents
AWS CloudFormation allows you to configure AWS resources from script/code. This makes deployment easy, and consistent, and greately decrease the possiblity os errors or misconfigurations.
For supported AWS integrations, deploying with CloudFormation is always recommended, if the script is avaliable.
Fluency offers several CloudFormation scripts to facilitate integration. While these scripts are free to use, keep in mind that AWS CloudFormation is a paid service, and you will incur a charge from AWS for using it.
AWS CloudFormation
As outlined in the respective sections (Legacy), the process to configure CloudTrail and CloudWatch Logs can be complicated. Fluency provides a single CloudFormation script to complete all the steps to collect CloudTrail data. Additionally, this script also gives the IAM user permissions to read all CloudWatch data.
Link to the CloudFormation file on S3:
https://fluency-cloudformation.s3.us-east-2.amazonaws.com/Fluency_AWS_Import_CloudTrail_CloudWatch.yaml
Link to the CloudFormation file on S3 (for AWS GovCloud users):
https://fluency-cloudformation.s3.us-east-2.amazonaws.com/FluencyGovCloudTrail.yaml
Deploying a CloudFormation template
Navigate to the CloudFormation section of the AWS Management Console.
Under the “Stacks” section, choose “Create stack” (with new resources, standard).
On the following page, specify a template, and choose the desired template (using Amazon S3 URL) from above:
Click “Next” to continue.
Give this deployment a name, and specify some parameters of the queue. You can choose your own name, or keep the default values provided by Fluency.
NOTE: You must change the default value of the S3Bucket. Or the CloudFormation will always fail and be rolled back.
AWS S3 Bucket names must be Globally Unique; the default S3 bucket name already exists elsewhere in AWS.
Ensure that the AWS S3 Bucket name chosen follows the AWS Bucket naming rules.
https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html
Click “Next” to continue.
Configure additional items (optional).
Click “Next” to continue.
Review the deployment, when complete, choose “Create stack” to deploy.
The deployment in progress:
Once the deployment is complete, navigate to the “Outputs” tab.
Copy the details (Key/Values) shown. You will be asked for these items on the Fluency interface.
Continue configuration on Fluency.
Page last updated: 2022 Dec 21