is there a way to get insight to see when people launch Amazon Marketplace apps? We would then like to use this as an audit flag.
Any thoughts are much appreciated!
Okay, so the technical side of the question is, "What kind of events can/does AWS Marketplace generate that can be ingested by splunk?"
But, really, the answer seems to be, "there's an app for that..."
Okay, so the technical side of the question is, "What kind of events can/does AWS Marketplace generate that can be ingested by splunk?"
But, really, the answer seems to be, "there's an app for that..."
LOVE IT! I will dig deeper into this app but when I looked at it the first time i did not see anything about capturing marketplace transactions. Please ppont to where this is stated in the documentation. Like you said, what trypes of events get generated by AWS Marketplae that splunk can capture.
From the splunk AWS app page
* Easy-to-configure data inputs for your AWS Config, Config Rules, CloudWatch, CloudTrail, Billing, ...
From the AWS page about CloudTrail -
AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk audi...
What people, specifically? What is your relationship to the apps that you want to monitor? You need to be much more specific in your question, in order to get useful feedback.
Splunk can ingest anything that you would like to send it. If you are attempting to monitor, for example, what your employees are doing on their desktops, then the question has to do with what information your firewall and DNS/DHCP server(s) are collecting while serving their web browsing needs.
On the other hand, if you are running a store on Amazon marketplace, it's a completely different question.
well i guess we would like to audit if someone launches something from the marketplace in our account. Someone would be an employee of our company that has access to even do such thing.