AWS Brain

Deploy a Vectra Brain in an AWS account for RUX or QUX deployments.

Introduction

Please see the sub pages of this page for the AWS Brain deployment guide contents.

Attachments

Attached to this article there are 5 files that are used for integration with AWS from the Brain for Host ID, Security Hub integration (QUX deployments only) and CloudWatch integration (QUX deployments only). Please see enabling integrations in the guide for more details.

HostIdTemplate.yml- Used for integration with the AWS Resource Manager to collect artifacts that provide details to Vectra's automated HostID capability.

883B

HostIdTemplate.yml

Open

HostIdFederatedParentTemplate.yml - Used for HostID in Federated AWS setups

2KB

HostIdFederatedParentTemplate.yml

Open

HostIdFederatedChildTemplate.yml - Used for HostID in Federated AWS setups

2KB

HostIdFederatedChildTemplate.yml

Open

SecurityHubTemplate - (QUX deployments only) - Used for integration with AWS Security Hub

1KB

SecurityHubTemplate.yml

Open

CloudwatchLogsTemplate - (QUX deployments only) - Used for integration with AWS CloudWatch

1KB

CloudwatchLogsTemplate.yml

Open

The files can also be downloaded from your Brain after deployment from the following locations:

• https://<brain_hostname_or_IP>/resources/HostIdTemplate.yaml/serve_file
• https://<brain_hostname_or_IP>/resources/HostIdFederatedParentTemplate.yaml/serve_file
• https://<brain_hostname_or_IP>/resources/HostIdFederatedChildTemplate.yaml/serve_file
• https://<brain_hostname_or_IP>/resources/SecurityHubTemplate.yaml/serve_file
• https://<brain_hostname_or_IP>/resources/CloudwatchLogsTemplate.yaml/serve_file