Real time alerts for suspicious activity and events on my cloud infrastructure
Last updated: 14 January 2020
Relevant users
| Technical Team member |  |
| DevOps Team member | |
| Security Analyst | |
| Security Engineer | |
| Compliance Manager | |
| Project Manager | |
| Security Team Management | |
| Consultant | |
Examples
- I am a CSO and want to affirm to the board that the organisation did nor have any breaches since the last time I reported to them.
- I am a SecOps engineer and want to be alerted of suspicious events on the accounts I am responsible for.
Cloud Conformity Solution
Step 1. Determine the account(s) you want to enable Real-Time Monitoring (RTM) for.
Step 2. Turn on Cloud Conformity’s Real-Time Monitoring (RTM) add-on in Subscriptions.
Step 3. Set up RTM.
Step 4. Set up communication channel(s) for example Slack, Jira, and SMS to receive RTM notifications about suspicious activity.
Hint: Create separate channels for different environments eg production, staging, and dev.
Step 5. Set communication triggers to send customised RTM notifications to your communication channels.
Step 6. Monitor RTM notifications within Cloud Conformity and your communication channels. Investigate suspicious activity and utilise Cloud Conformity’s failed check resolution workflow to remediate.
Hint: Use RTM with our open source Auto-remediation project to remediate failures in real time.