AWS Brain

This document outlines the steps to deploy a Vectra Brain in the customer’s AWS account. AWS Brains are supported for both Respond UX and Quadrant UX deployment.

Introduction

Please see the sub pages of this page for the AWS Brain deployment guide contents.

Attachments

Attached to this article there are 5 files that are used for integration with AWS from the Brain for Host ID, Security Hub integration (QUX deployments only) and CloudWatch integration (QUX deployments only). Please see enabling integrations in the guide for more details.

HostIdTemplate.yml- Used for integration with the AWS Resource Manager to collect artifacts that provide details to Vectra's automated HostID capability.

883B

HostIdTemplate.yml

Open

HostIdFederatedParentTemplate.yml - Used for HostID in Federated AWS setups

2KB

HostIdFederatedParentTemplate.yml

Open

HostIdFederatedChildTemplate.yml - Used for HostID in Federated AWS setups

2KB

HostIdFederatedChildTemplate.yml

Open

SecurityHubTemplate - (QUX deployments only) - Used for integration with AWS Security Hub

1KB

SecurityHubTemplate.yml

Open

CloudwatchLogsTemplate - (QUX deployments only) - Used for integration with AWS CloudWatch

1KB

CloudwatchLogsTemplate.yml

Open

The files can also be downloaded from your Brain after deployment from the following locations:

• https://<brain_hostname_or_IP>/resources/HostIdTemplate.yaml/serve_file

• https://<brain_hostname_or_IP>/resources/HostIdFederatedParentTemplate.yaml/serve_file

• https://<brain_hostname_or_IP>/resources/HostIdFederatedChildTemplate.yaml/serve_file

• https://<brain_hostname_or_IP>/resources/SecurityHubTemplate.yaml/serve_file

• https://<brain_hostname_or_IP>/resources/CloudwatchLogsTemplate.yaml/serve_file