AWS Security Blog
Tag: HAQM Elasticsearch Service
How to use AWS Security Hub and HAQM OpenSearch Service for SIEM
April 25, 2023: We’ve updated this blog post to include more security learning resources. AWS Security Hub provides you with a consolidated view of your security posture in HAQM Web Services (AWS) and helps you check your environment against security standards and current AWS security recommendations. Although Security Hub has some similarities to security information […]
Configure SAML single sign-on for Kibana with AD FS on HAQM Elasticsearch Service
September 9, 2021: HAQM Elasticsearch Service has been renamed to HAQM OpenSearch Service. See details. It’s a common use case for customers to integrate identity providers (IdPs) with HAQM Elasticsearch Service (HAQM ES) to achieve single sign-on (SSO) with Kibana. This integration makes it possible for users to leverage their existing identity credentials and offers […]
Masking field values with HAQM Elasticsearch Service
September 9, 2021: HAQM Elasticsearch Service has been renamed to HAQM OpenSearch Service. See details. HAQM Elasticsearch Service (HAQM ES) is a fully managed service that you can use to deploy, secure, and run Elasticsearch cost-effectively at scale. The service provides support for open-source Elasticsearch APIs, managed Kibana, and integration with Logstash and other AWS […]
How to visualize multi-account HAQM Inspector findings with HAQM Elasticsearch Service
September 9, 2021: HAQM Elasticsearch Service has been renamed to HAQM OpenSearch Service. See details. HAQM Inspector helps to improve the security and compliance of your applications that are deployed on HAQM Web Services (AWS). It automatically assesses HAQM Elastic Compute Cloud (HAQM EC2) instances and applications on those instances. From that assessment, it generates […]
Get started with fine-grained access control in HAQM Elasticsearch Service
September 9, 2021: HAQM Elasticsearch Service has been renamed to HAQM OpenSearch Service. See details. HAQM Elasticsearch Service (HAQM ES) provides fine-grained access control, powered by the Open Distro for Elasticsearch security plugin. The security plugin adds Kibana authentication and access control at the cluster, index, document, and field levels that can help you secure […]
Alerting, monitoring, and reporting for PCI-DSS awareness with HAQM Elasticsearch Service and AWS Lambda
September 9, 2021: HAQM Elasticsearch Service has been renamed to HAQM OpenSearch Service. See details. Logging account activity within your AWS infrastructure is paramount to your security posture and could even be required by compliance standards such as PCI-DSS (Payment Card Industry Security Standard). Organizations often analyze these logs to adapt to changes and respond […]
How to analyze AWS WAF logs using HAQM Elasticsearch Service
September 9, 2021: HAQM Elasticsearch Service has been renamed to HAQM OpenSearch Service. See details. Log analysis is essential for understanding the effectiveness of any security solution. It can be valuable for day-to-day troubleshooting and also for your long-term understanding of how your security environment is performing. AWS WAF is a web application firewall that […]
The Most Viewed AWS Security Blog Posts in 2017
September 9, 2021: HAQM Elasticsearch Service has been renamed to HAQM OpenSearch Service. See details. The following 10 posts were the most viewed AWS Security Blog posts that we published during 2017. You can use this list as a guide to catch up on your AWS Security Blog reading or read a post again that […]
How to Visualize and Refine Your Network’s Security by Adding Security Group IDs to Your VPC Flow Logs
September 9, 2021: HAQM Elasticsearch Service has been renamed to HAQM OpenSearch Service. See details. August 31, 2020: The directions in this blog post for how to create an HAQM ES cluster have been updated. February 28, 2019: The features and services described in this post have changed since the post was published and the […]
How to Monitor Host-Based Intrusion Detection System Alerts on HAQM EC2 Instances
September 9, 2021: HAQM Elasticsearch Service has been renamed to HAQM OpenSearch Service. See details. To help you secure your AWS resources, we recommend that you adopt a layered approach that includes the use of preventative and detective controls. For example, incorporating host-based controls for your HAQM EC2 instances can restrict access and provide appropriate […]