Forum Discussion

HA13029's avatar
HA13029
Brass Contributor
Jan 31, 2025

Sentinel and Amazon Web Services S3 WAF

Hello,

I'm using Sentinel to fetch AWS WAF logs using the new collector Amazon Web Services S3 WAF .

I setup a first collection using the ARN role and SQS Queue (Francfort Region).

arn:aws:iam::XXXXXXXXX:role/OIDC_MicrosoftSentinel

https://sqs.eu-central-1.amazonaws.com/XXXXXXX/sqs-aws-cloudwatch-sentinel

I then add new collection using ARN role and SQS Queue (Francfort Region).

arn:aws:iam::XXXXXXXXX:role/OIDC_MicrosoftSentinel

https://sqs.eu-west-3.amazonaws.com/XXXXXXX/sqs-aws-cloudwatch-sentinel

Adding the second collection erase the first one !!

Is it a bug ??

Regards,

HA

Resources