Aqua CSPM Events can be configured to send alerts based on the API action (e.g. "s3:CreateBucket" or "ec2:DeleteInstance").


To enable Event alerts, follow the steps below


Step 1: Ensure your cloud account is enrolled in Events and Aqua  CSPM is receiving data


Step 2: Create an Event alert

  • Navigate to the Alerts page.
  • Click the Events tab at the top.
  • Click the Create Alert button at the top right
  • In the popup box, use the fields to configure the alert criteria. You can select multiple fields by holding "Shift" when clicking.


Step 3: View your existing Event alerts

  • Navigate to the Alerts page.
  • Click the Events tab at the top.
  • Use the search and filter to locate your event alerts.