From cda18e978acc59d4bcb1e249939ed57595dd8ae4 Mon Sep 17 00:00:00 2001 From: Krishna Chaitanya Reddy Burri Date: Fri, 23 May 2025 18:17:28 +0530 Subject: [PATCH] Add aws.config source indices to kibana_system role permissions (#128350) Adding `logs-aws.config-*` data stream indices to the `kibana_system` privileges. This is required for the latest transform to work. Related: - https://github.com/elastic/integrations/pull/13830#discussion_r2100362326 (cherry picked from commit 169527ff6cf4976d7b30dfbf221565a46cc7c649) --- .../security/authz/store/KibanaOwnedReservedRoleDescriptors.java | 1 + .../xpack/core/security/authz/store/ReservedRolesStoreTests.java | 1 + 2 files changed, 2 insertions(+) diff --git a/x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java b/x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java index 493e561a6b03c..ececf369bf611 100644 --- a/x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java +++ b/x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java @@ -433,6 +433,7 @@ static RoleDescriptor kibanaSystem(String name) { "logs-aws.securityhub_findings-*", "logs-aws.securityhub_findings_full_posture-*", "logs-aws.inspector-*", + "logs-aws.config-*", "logs-amazon_security_lake.findings-*", "logs-qualys_vmdr.asset_host_detection-*", "logs-tenable_sc.vulnerability-*", diff --git a/x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java b/x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java index 76070bba4d87b..4ed763d3faffb 100644 --- a/x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java +++ b/x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java @@ -1622,6 +1622,7 @@ public void testKibanaSystemRole() { "logs-aws.securityhub_findings-" + randomAlphaOfLength(randomIntBetween(0, 13)), "logs-aws.securityhub_findings_full_posture-" + randomAlphaOfLength(randomIntBetween(0, 13)), "logs-aws.inspector-" + randomAlphaOfLength(randomIntBetween(0, 13)), + "logs-aws.config-" + randomAlphaOfLength(randomIntBetween(0, 13)), "logs-amazon_security_lake.findings-" + randomAlphaOfLength(randomIntBetween(0, 13)), "logs-qualys_vmdr.asset_host_detection-" + randomAlphaOfLength(randomIntBetween(0, 13)), "logs-tenable_sc.vulnerability-" + randomAlphaOfLength(randomIntBetween(0, 13)),