What credentials are being used when it’s making its API calls for Splunk Add-on for Amazon Web Services? Is it the account we put with a friendly name under Configuration Tab? Or the Role we associate it with? Or something else? I just want to know since we see that we are getting some Cloudwatch data in by executing some commands on the backend, however, we are not sure why it's not showing up in Splunk Web.
Still having problem getting Cloudwatch data in.