Skip to content

Commit 169527f

Browse files
authored
Add aws.config source indices to kibana_system role permissions (#128350)
Adding `logs-aws.config-*` data stream indices to the `kibana_system` privileges. This is required for the latest transform to work. Related: - elastic/integrations#13830 (comment)
1 parent cae06b8 commit 169527f

File tree

2 files changed

+2
-0
lines changed

2 files changed

+2
-0
lines changed

x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -478,6 +478,7 @@ static RoleDescriptor kibanaSystem(String name) {
478478
"logs-aws.securityhub_findings-*",
479479
"logs-aws.securityhub_findings_full_posture-*",
480480
"logs-aws.inspector-*",
481+
"logs-aws.config-*",
481482
"logs-amazon_security_lake.findings-*",
482483
"logs-qualys_vmdr.asset_host_detection-*",
483484
"logs-tenable_sc.vulnerability-*",

x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1646,6 +1646,7 @@ public void testKibanaSystemRole() {
16461646
"logs-aws.securityhub_findings-" + randomAlphaOfLength(randomIntBetween(0, 13)),
16471647
"logs-aws.securityhub_findings_full_posture-" + randomAlphaOfLength(randomIntBetween(0, 13)),
16481648
"logs-aws.inspector-" + randomAlphaOfLength(randomIntBetween(0, 13)),
1649+
"logs-aws.config-" + randomAlphaOfLength(randomIntBetween(0, 13)),
16491650
"logs-amazon_security_lake.findings-" + randomAlphaOfLength(randomIntBetween(0, 13)),
16501651
"logs-qualys_vmdr.asset_host_detection-" + randomAlphaOfLength(randomIntBetween(0, 13)),
16511652
"logs-tenable_sc.vulnerability-" + randomAlphaOfLength(randomIntBetween(0, 13)),

0 commit comments

Comments
 (0)