Skip to main content

Cloud Workload Security

Discussions, questions, and answers related to cloud workload security

  • 8 Topics
  • 10 Replies
8 Topics
therockvalley
therockvalleyParticipant
asked in Cloud Workload Security
Has anyone figured out a way to create resource groups based on pod labels?

I’m trying to create container resource groups based on pod labels, but these do not seem to be available.In specific I want to be able to create resource groups and queries based on the output of: kubectl get pod my_pod -n my_namespace -o=jsonpath='{.metadata.labels}'Below is an example of what I would like to do in query terms:filter { containers.PROPS_LABELS["my_pod_label_key"] = "my_pod_label_value" }(this won’t actually work afaik, just an illustration of what I’m after)Seems like a rather obvious thing to be able to do. Wondering is there is an apparent trick I’m missing.AgentN/APlatformTuning Lacework/CustomizationCloudN/A

4334
scott.russell
6 months ago
J
JoeCloudParticipant
posted in Cloud Workload Security
Lacework Support of CloudTrail's S3 Data Event Log Scanning

Is Lacework planning to support the scanning of CloudTrail's S3 Data Event Logs, which include actions like PUT, GET, HEAD, etc.?This capability would be instrumental in identifying potentially compromised accounts or detecting leaked access keys.If this feature is in the roadmap, what is the anticipated timeline for its roll-out? Reference: https://repost.aws/knowledge-center/cloudtrail-data-management-events AgentN/APlatformUsing Lacework/OperationalizingCloudAWS

6762
J
8 months ago
J
julian.hartyCommunity Manager
asked in Cloud Workload Security
How to identify all internet exposed resources?

Details

6672
jth
1 year ago
J
julian.hartyCommunity Manager
asked in Cloud Workload Security
How do I set time range in LQL?

Details...

6011
danielburn5
Lacer
1 year ago
T
Lacer
tyler.williamsonLacer
asked in Cloud Workload Security
How does lacework agentless workload scanning gather data?

What are the specific ways the agentless workload scanning actually works to gather data? AgentAgentlessPlatformCurrentCloudGCP

4050
T
Lacer
1 year ago
Y
Lacer
ys009Lacer
asked in Cloud Workload Security
Where do I see Active Containers with LW agents running in my environment?

Once you are logged in the Lacework platform, List of active containers can be found via navigating to Resources > Containers > List of active containers under the Polygraph.  AgentLinux 6.6XPlatformCurrentCloudHybrid

4910
Y
Lacer
1 year ago
T
Lacer
TodoLacer
asked in Cloud Workload Security
How do I tell what hosts do not have an agent deployed on them?

AgentLinux 6.6XPlatformCurrentCloudAWS

3981
T
Lacer
1 year ago
J
julian.hartyCommunity Manager
asked in Cloud Workload Security
How do I migrate my Lacework settings from individual CloudTrails to Consolidated or Control Tower?

Details

2590
J
1 year ago

Badge winners

Show all badges
Terms of UseCookie settings