Events Wizard | Aqua Wave

Step	Instruction
1	Ensure you are logged into the correct AWS account with permission to create CloudFormation stacks.
2	Click here to launch the CloudFormation stack:
4	Under "Parameters" enter the following value for "URLId":
3	Click "Create" and wait for the stack to complete.
4	Repeat steps 2-3 in each AWS region you wish to monitor. Note: Global services (IAM, Route53, etc) send events to us-east-1, so it is strongly recommended to deploy the stack in this region.

Step	Instruction
1	Ensure you are logged into the correct AWS account with permission to create CloudFormation stacks.
2	Set up permissions for Stack Set operations (Optional) Note: Needs to be done only once per account. Launching this stack enables you to run stack sets and deploy events monitoring to all regions, please (read more here).
3	Click here to open the Stack Sets wizard.
4	Copy the URL below and paste under "Amazon S3 URL": https://aqua-cspm-resources.s3.amazonaws.com/cloudformation/cfn-cw-events.json
5	Click "Next".
6	Enter a "StackSet name".
7	Under "Parameters" enter the following value for "URLId":
8	Click "Next".
9	Under "Configure StackSet options" click "Next".
10	For "Set deployment options" enter your AWS account number.
11	Click "Add all regions". Note: Please remove disabled regions as they cannot be monitored for events.
12	Click "Next".
12	Review and click "Submit" to deploy.

Step	Instruction
1	Ensure you are logged into your Azure subscription with permission to create ARM and Activity Log resources
2	Run the following PowerShell script in your cloud shell. `$scriptPath = 'https://resources.cloudsploit.com/production/events_ps_script';$script = (New-Object System.Net.WebClient).DownloadString($scriptPath);$scriptBlock = [Scriptblock]::Create($script);Invoke-Command -ScriptBlock $scriptBlock;`
3	When the script finishes running the event service should be connected.

Set Up Events