AWS Verified Access

이 페이지는 아직 한국어로 제공되지 않으며 번역 작업 중입니다. 번역에 관한 질문이나 의견이 있으시면 언제든지 저희에게 연락해 주십시오.

Overview

With AWS Verified Access, you can provide secure access to your corporate applications without requiring the use of a virtual private network (VPN). Verified Access evaluates each application request and helps ensure that users can access each application only when they meet the specified security requirements.

Setup

Installation

If you haven’t already, set up the Amazon Web Services integration first.

Log collection

Enable Verified Access logs

Open the Amazon VPC console
In the navigation pane, choose Verified Access instances.
Select the Verified Acccess instance.
On the Verified Access instance logging configuration tab, choose Modify Verified Access instance logging configuration
Turn on Deliver to Amazon Cloudwatch Logs. Choose the destination log group.

Note: Include the string verified-access in the log group name to enable automatic log parsing.

For more information, see Enable Verified Access logs.

Send logs to Datadog

Note: If you are using Datadog’s Amazon Security Lake integration, you can send Verified Access logs through that integration instead of following the steps below.

If you haven’t already, set up the Datadog Forwarder Lambda function in your AWS account.
Once set up, go to the Datadog Forwarder Lambda function. In the Function Overview section, click Add Trigger.
Select the CloudWatch Logs trigger for the Trigger Configuration.
Select the log group that contains your Verified Access logs.
Add a Filter Name.
Click Add to add the trigger to your Lambda.

Go to the Log Explorer to start exploring your logs.

For more information on collecting AWS Services logs, see Send AWS Services Logs with the Datadog Lambda function.