Skip to content

Commit 9f9e521

Browse files
committed
fixed links
1 parent b33012a commit 9f9e521

File tree

3 files changed

+11
-6
lines changed

3 files changed

+11
-6
lines changed

articles/sentinel/connect-aws-configure-environment.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: Set up your Amazon Web Services environment to collect AWS logs to Microsoft Sentinel
2+
title: Set up your Amazon Web Services (AWS) environment to collect AWS logs to Microsoft Sentinel
33
description: Set up your Amazon Web Services environment to send AWS logs to Microsoft Sentinel using one of the Microsoft Sentinel AWS connectors.
44
author: guywi-ms
55
ms.author: guywild
@@ -11,7 +11,7 @@ ms.date: 05/28/2025
1111

1212
---
1313

14-
# Set up your Amazon Web Services environment to collect AWS logs to Microsoft Sentinel
14+
# Set up your Amazon Web Services (AWS) environment to collect AWS logs to Microsoft Sentinel
1515

1616
Amazon Web Services (AWS) connectors simplify the process of collecting logs from Amazon S3 (Simple Storage Service) and ingesting them into Microsoft Sentinel. The connectors provide tools to help you configure your AWS environment for Microsoft Sentinel log collection.
1717

@@ -47,7 +47,7 @@ This diagram shows how to set up your AWS environment to send logs to Azure:
4747

4848
### Manual setup
4949

50-
Although you can set up the AWS environment manually, as described below, we strongly recommend using the automated tools provided when you [deploy AWS connectors](#deploy-aws-connectors) instead.
50+
Although you can set up the AWS environment manually, as described below, we strongly recommend using the automated tools provided when you [deploy AWS connectors](#4-deploy-aws-connectors) instead.
5151

5252
#### 1. Create an S3 bucket and SQS queue
5353

@@ -117,7 +117,7 @@ Follow these instructions in the AWS documentation:<br>[Creating OpenID Connect
117117
]
118118
}
119119
```
120-
120+
121121
- `XXXXXXXXXXXX` is your AWS Account ID.
122122
- `XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX` is your Microsoft Sentinel workspace ID.
123123

articles/sentinel/connect-aws.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ This tab explains how to configure the AWS S3 connector using one of two methods
4040
- **Amazon VPC**: .csv file in GZIP format with headers; delimiter: space.
4141
- **Amazon GuardDuty**: json-line and GZIP formats.
4242
- **AWS CloudTrail**: .json file in a GZIP format.
43-
- **CloudWatch**: .csv file in a GZIP format without a header. If you need to convert your logs to this format, you can use this [CloudWatch lambda function](cloudwatch-lambda-function.yml).
43+
- **CloudWatch**: .csv file in a GZIP format without a header. If you need to convert your logs to this format, you can use this [CloudWatch lambda function](#send-formatted-cloudwatch-events-to-s3-using-a-lambda-function-optional).
4444

4545

4646
## Automatic setup
@@ -148,7 +148,7 @@ Learn how to [troubleshoot Amazon Web Services S3 connector issues](aws-s3-troub
148148
This tab explains how to configure the AWS CloudTrail connector. The process of setting it up has two parts: the AWS side and the Microsoft Sentinel side. Each side's process produces information used by the other side. This two-way authentication creates secure communication.
149149

150150
> [!NOTE]
151-
> AWS CloudTrail has [built-in limitations](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html) in its LookupEvents API. It allows no more than two transactions per second (TPS) per account, and each query can return a maximum of 50 records. Consequently, if a single tenant constantly generates more than 100 records per second in one region, backlogs and delays in data ingestion will result.
151+
> AWS CloudTrail has [built-in limitations](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html) in its LookupEvents API. It allows no more than two transactions per second (TPS) per account, and each query can return a maximum of 50 records. If a single tenant constantly generates more than 100 records per second in one region, backlogs and delays in data ingestion will result.
152152
>
153153
> Currently, you can only connect your AWS Commercial CloudTrail to Microsoft Sentinel and not AWS GovCloud CloudTrail.
154154

redirects/.openpublishing.redirection.sentinel.json

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2219,6 +2219,11 @@
22192219
"source_path_from_root": "/articles/sentinel/data-connectors/awake-security.md",
22202220
"redirect_url": "/previous-versions/azure/sentinel/data-connectors/awake-security-via-legacy-agent",
22212221
"redirect_document_id": false
2222+
},
2223+
{
2224+
"source_path_from_root": "/articles/sentinel/cloudwatch-lambda-function.md",
2225+
"redirect_url": "/azure/sentinel/connect-aws#send-formatted-cloudwatch-events-to-s3-using-a-lambda-function-optional",
2226+
"redirect_document_id": false
22222227
}
22232228
]
22242229
}

0 commit comments

Comments
 (0)