Skip to main content

Collect Your AWS Data with Fluency

Support
Support
Fluency Support

The Fluency Platform now reads directly from the AWS services that carry your logs — Kinesis, Firehose, S3, CloudWatch and Security Lake — and authenticates with a role you grant it, set up from a CloudFormation template.

What you can collect​

  • AWS CloudTrail — API activity across your accounts. See AWS CloudTrail.
  • CloudWatch log groups — through a subscription filter to Kinesis Data Streams, Amazon Data Firehose or AWS Lambda; the platform supports all three. See Amazon CloudWatch.
  • S3 buckets — read as new objects arrive, using an S3 event notification to an SQS queue. See S3 Notification.
  • VPC flow logs — written to S3 or to a CloudWatch log group, then read from there.
  • Amazon GuardDuty — findings through a platform plugin. See Amazon GuardDuty.
  • Amazon Security Lake — the OCSF data Security Lake gathers from many AWS services. See Amazon Security Lake.

The platform also writes to Kinesis, Firehose and Lambda, so data can flow back into your AWS workflows.

How access works​

Fluency reads your data by assuming a role in your AWS account. CloudFormation templates and IAM policies create the role and the permissions each integration needs, and the role is then registered in Fluency. See Connecting to AWS.

Splash Summary

The Fluency Platform now reads directly from the AWS services that carry your logs — Kinesis, Firehose, S3, CloudWatch and Security Lake — and authenticates with a role you grant it, set up from a CloudFormation template.