All Apps and Add-ons

AWS Config Aggregators in Splunk Add-on for AWS

Path Finder

Hello!

I'm using the full-feature AWS Organization. It allows to create an aggregator that contains Config data from all accounts and regions in the organization.
Is it possible to get this data into Splunk using Splunk Ann-on for AWS? I can't find a good option for it.
Of course, I can create a bucket with all the config data from all accounts, but it requires a lot of effort and seems unreasonable.
Maybe it is possible to create an input which utilize 

 get-aggregate-resource-config

 method? It looks much easier to query a single API endpoint than set up data collection from different sources to one place. BTW, it can be a good substitution to Describe with Assume Role inputs.

 

Labels (1)
0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!