Configure AWS for Arctic Wolf monitoring

You can configure Amazon Web Services (AWS)® to send the necessary logs to Arctic Wolf® for security monitoring.

Note:

  • If you already have an Arctic Wolf AWS stack deployed, see Update AWS CloudFormation Stacks instead.

  • To configure AWS Security Hub® log monitoring or AWS Web Application Firewall (WAF)® log monitoring, you must first complete the listed mandatory configurations.

  1. Configure AWS accounts for Arctic Wolf monitoring.
  2. Configure AWS CloudTrail events for Arctic Wolf monitoring.
  3. Configure Amazon GuardDuty for Arctic Wolf monitoring.
  4. Optional: Configure AWS Security Hub for Arctic Wolf monitoring.
  5. Optional: Configure AWS WAF for Arctic Wolf monitoring.
  6. Optional: Configure an AWS S3 bucket for Arctic Wolf monitoring.