Events Wizard | Aqua Wave

Step	Instruction
1	Ensure you are logged into the correct AWS account with permission to create CloudFormation stacks.
2	Click here to launch the CloudFormation stack:
4	Under "Parameters" enter the following value for "URLId":
3	Click "Create" and wait for the stack to complete.
4	Repeat steps 2-3 in each AWS region you wish to monitor. Note: Global services (IAM, Route53, etc) send events to us-east-1, so it is strongly recommended to deploy the stack in this region.

Step	Instruction
1	Ensure you are logged into the correct AWS account with permission to create CloudFormation stack sets. Note: You must have an account that is configured to use StackSets (see setup guide).
2	Click here to open the Stack Sets wizard.
3	Copy the URL below and paste under "Amazon S3 URL": https://aqua-cspm-resources.s3.amazonaws.com/cloudformation/cfn-cw-events.json
4	Click "Next".
5	Enter a "StackSet name".
6	Under "Parameters" enter the following value for "URLId":
7	Click "Next".
8	Under "Configure StackSet options" click "Next".
9	For "Set deployment options" enter your AWS account number.
10	Click "Add all regions".
11	Click "Next".
12	Review and click "Submit" to deploy.

Step	Instruction
1	Ensure you are logged into your Azure subscription with permission to create ARM and Activity Log resources
2	Run the following PowerShell script in your cloud shell. `$scriptPath = 'https://resources.cloudsploit.com/production/events_ps_script';$script = (New-Object System.Net.WebClient).DownloadString($scriptPath);$scriptBlock = [Scriptblock]::Create($script);Invoke-Command -ScriptBlock $scriptBlock;`
3	When the script finishes running the event service should be connected.

Set Up Events