Forum Discussion
HA13029
Jan 31, 2025Brass Contributor
Sentinel and Amazon Web Services S3 WAF
Hello,
I'm using Sentinel to fetch AWS WAF logs using the new collector Amazon Web Services S3 WAF .
I setup a first collection using the ARN role and SQS Queue (Francfort Region).
arn:aws:iam::XXXXXXXXX:role/OIDC_MicrosoftSentinel
https://sqs.eu-central-1.amazonaws.com/XXXXXXX/sqs-aws-cloudwatch-sentinel
I then add new collection using ARN role and SQS Queue (Francfort Region).
arn:aws:iam::XXXXXXXXX:role/OIDC_MicrosoftSentinel
https://sqs.eu-west-3.amazonaws.com/XXXXXXX/sqs-aws-cloudwatch-sentinel
Adding the second collection erase the first one !!
Is it a bug ??
Regards,
HA
- logger2115Brass Contributor
Similar use case with same question