Configuring an S3 Bucket

Amazon Simple Storage Service (Amazon S3) is an object storage service that delivers industry-leading scalability, data availability, security, and performance.

The Wazuh module for AWS requires every supported AWS service except Inspector Classic, CloudWatch Logs, and Security Lake to store their logs in an S3 bucket. However, you can use a single S3 bucket for all these services, eliminating the need to create individual buckets for them. Wazuh retrieves these logs from the bucket for analysis.

In this section we describe how to create an Amazon S3 bucket:

  1. On your AWS console, go to Services > Storage > S3.

    S3 storage service

  2. Click Create bucket to create a new S3 bucket.

    Create a bucket

  3. Enter the name of your S3 bucket, then click Create bucket.

    Create bucket 2
    Create bucket 3

Note

Copy the bucket ARN because it will be needed later for some AWS services.