CloudTrail

Parny | CloudTrail Integration Guide

Parny supports direct integration with CloudTrail alerts. CloudTrail is a network and system monitoring tool that can create alarms to detect and prevent potential problems. This documentation explains how to redirect alarms created in CloudTrail to a webhook using Parny.


Parny Settings


  1. Go to the Parny interface.

  2. Navigate to the "Services" section of your organization.

  3. Click on the "New Services" option in the upper right corner.

  4. Enter the relevant service name.

Service Name Usage: The service name here is independent of the structure and can be chosen according to the preferences of the organization.


  1. Select CloudTrail from the list of integrations.

  2. Click "Add".

  3. After the service is created, the following screen will appear.


drawing


  • You can now click on the token section of your service and copy your CloudTrail Webhook URL.


Cloudwatch Configuration

In this section, we will guide you through "Creating SNS Topic".


To transfer events from CloudTrail to CloudWatch, follow the instructions in the document provided in the following link. https://docs.aws.amazon.com/awscloudtrail/latest/userguide/send-cloudtrail-events-to-cloudwatch-logs.html


Creating SNS Topic


  1. You can create a new topic from the screen in the image below ("Topics" tab of the SNS service). The created topic must be of "Standard" type.


drawing


  1. After the relevant SNS Topic is created, a "Subcscription" must be created for it.


drawing


  1. The "HTTPS" protocol should be selected for the subscription as in the example given above, and the Webhook URL (token) from the service created through the Parny portal should be given as the endpoint.


drawing


  1. After the “Topic” and “Subscription” processes are completed, the topic can be added to desired notifications in Cloudwatch alerts.


Notice

Topic, "Subscription Confirmation" can be done manually via the interface. Besides, Parny Cloudwatch API is customized to automatically send the required request for approval of the relevant topic. Detailed information for the communication of Cloudwatch and SNS services and the connection of the SNS service to HTTP/S endpoints can be accessed from the links below.
Setting up Amazon SNS notifications - Amazon CloudWatch Subscribing an HTTP/S endpoint to a topic - Amazon Simple Notification Service

With these settings, your CloudTrail alarms will be forwarded to Parny, allowing you to manage them alongside your other alerts within your organization's Parny interface.