From fe10b2bb3808ee0d6677a80ec67991950b8eeef5 Mon Sep 17 00:00:00 2001 From: Krishna Chaitanya Reddy Burri Date: Fri, 23 May 2025 18:17:28 +0530 Subject: [PATCH] Add aws.config source indices to kibana_system role permissions (#128350) Adding `logs-aws.config-*` data stream indices to the `kibana_system` privileges. This is required for the latest transform to work. Related: - https://github.com/elastic/integrations/pull/13830#discussion_r2100362326 (cherry picked from commit 169527ff6cf4976d7b30dfbf221565a46cc7c649) --- .../security/authz/store/KibanaOwnedReservedRoleDescriptors.java | 1 + .../xpack/core/security/authz/store/ReservedRolesStoreTests.java | 1 + 2 files changed, 2 insertions(+) diff --git a/x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java b/x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java index 85acbabf32661..b01a3da98b02e 100644 --- a/x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java +++ b/x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java @@ -449,6 +449,7 @@ static RoleDescriptor kibanaSystem(String name) { "logs-aws.securityhub_findings-*", "logs-aws.securityhub_findings_full_posture-*", "logs-aws.inspector-*", + "logs-aws.config-*", "logs-amazon_security_lake.findings-*", "logs-qualys_vmdr.asset_host_detection-*", "logs-tenable_sc.vulnerability-*", diff --git a/x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java b/x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java index e57150da5957f..c37fc7670fbb7 100644 --- a/x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java +++ b/x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java @@ -1627,6 +1627,7 @@ public void testKibanaSystemRole() { "logs-aws.securityhub_findings-" + randomAlphaOfLength(randomIntBetween(0, 13)), "logs-aws.securityhub_findings_full_posture-" + randomAlphaOfLength(randomIntBetween(0, 13)), "logs-aws.inspector-" + randomAlphaOfLength(randomIntBetween(0, 13)), + "logs-aws.config-" + randomAlphaOfLength(randomIntBetween(0, 13)), "logs-amazon_security_lake.findings-" + randomAlphaOfLength(randomIntBetween(0, 13)), "logs-qualys_vmdr.asset_host_detection-" + randomAlphaOfLength(randomIntBetween(0, 13)), "logs-tenable_sc.vulnerability-" + randomAlphaOfLength(randomIntBetween(0, 13)),