Blog Post

Microsoft Sentinel Blog

3 MIN READ

Enhance the ingestion of AWS CloudWatch logs into Microsoft Sentinel with AWS Lambda

Microsoft

Apr 01, 2024

Microsoft Sentinel has recently made its AWS S3 data connector generally available (GA), offering users the capability to ingest logs from various AWS services such as CloudTrail, CloudWatch, VPCFlow...

Updated Mar 31, 2024

Version 1.0

best practices

data collection

Sreedhar_Ande

Microsoft

Joined August 27, 2020

View Profile

Microsoft Sentinel Blog

Microsoft Sentinel is an industry-leading SIEM & AI-first platform powering agentic defense across the entire security ecosystem.

Sreedhar_Ande

Microsoft

Jul 11, 2024

dpritchardncc - I think you are using Old version of the script. New version - https://github.com/Azure/Azure-Sentinel/blob/master/DataConnectors/AWS-S3/CloudWatchLambdaFunction_V2.py. In this version, script will programmatically fetch across multiple AWS Accounts with distinct LogGroup and StreamNames configurations