Skip to content

Commit 9fca3d2

Browse files
authored
Add aws.config source indices to kibana_system role permissions (#128350) (#128443)
Adding `logs-aws.config-*` data stream indices to the `kibana_system` privileges. This is required for the latest transform to work. Related: - elastic/integrations#13830 (comment) (cherry picked from commit 169527f)
1 parent f5e1d07 commit 9fca3d2

File tree

2 files changed

+2
-0
lines changed

2 files changed

+2
-0
lines changed

x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -470,6 +470,7 @@ static RoleDescriptor kibanaSystem(String name) {
470470
"logs-aws.securityhub_findings-*",
471471
"logs-aws.securityhub_findings_full_posture-*",
472472
"logs-aws.inspector-*",
473+
"logs-aws.config-*",
473474
"logs-amazon_security_lake.findings-*",
474475
"logs-qualys_vmdr.asset_host_detection-*",
475476
"logs-tenable_sc.vulnerability-*",

x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1644,6 +1644,7 @@ public void testKibanaSystemRole() {
16441644
"logs-aws.securityhub_findings-" + randomAlphaOfLength(randomIntBetween(0, 13)),
16451645
"logs-aws.securityhub_findings_full_posture-" + randomAlphaOfLength(randomIntBetween(0, 13)),
16461646
"logs-aws.inspector-" + randomAlphaOfLength(randomIntBetween(0, 13)),
1647+
"logs-aws.config-" + randomAlphaOfLength(randomIntBetween(0, 13)),
16471648
"logs-amazon_security_lake.findings-" + randomAlphaOfLength(randomIntBetween(0, 13)),
16481649
"logs-qualys_vmdr.asset_host_detection-" + randomAlphaOfLength(randomIntBetween(0, 13)),
16491650
"logs-tenable_sc.vulnerability-" + randomAlphaOfLength(randomIntBetween(0, 13)),

0 commit comments

Comments
 (0)