AWS Network Firewall

Collect AWS Network Firewall monitoring data.

Configuration¶

Install Func¶

We recommend enabling hosted Func under Integration - Extensions in TrueWatch. All prerequisites are installed automatically; continue with the script installation.

If deploying Func manually, refer to Manual Deployment of Func

Activate Script¶

Note: Prepare an AWS AK that meets the requirements. For simplicity, you can grant the global read-only permission ReadOnlyAccess directly.

Activate Scripts in Hosted Func¶

1. Log in to the TrueWatch console
2. Click the 【Integration】 menu and select 【Cloud Account Management】
3. Click 【Add Cloud Account】, select 【AWS】, and fill in the required information on the interface. If you have already configured the cloud account information before, ignore this step
4. Click 【Test】, and if the test is successful, click 【Save】. If the test fails, please check if the relevant configuration information is correct and test again
5. Click 【Cloud Account Management】, and you can see the added cloud account in the list. Click the corresponding cloud account to enter the details page
6. Click 【Integration】 on the cloud account details page, find AWS Network Firewall in the Not Installed list and click 【Install】 to open the installation form.

Manual Activation Script¶

1. Log in to the Func console, click 【Script Market】, open the TrueWatch script market and search for integration_aws_cloudwatch.
2. Click 【Install】 and enter AWS AK ID, AK Secret, and the account name.
3. Click Deploy Startup Script. The system automatically creates the Startup script set and configures the startup script. In collector_configs, set regions to the actual regions and change targets to the metric configuration for AWS/NetworkFirewall. Then publish and enable automatic triggers.
4. After enabling the script, open 【Management / Automatic Trigger Configuration】 to view its automatic trigger configuration. Click 【Execute】 to run it immediately without waiting for the scheduled time. After a short wait, review the task records and logs.

Verification¶

1. Under 【Management / Automatic Trigger Configuration】, confirm that the task has an automatic trigger configuration. Review its task records and logs for errors.
2. In TrueWatch, open Metrics and check for the monitoring data.

Metrics¶

After configuring AWS CloudWatch, the default metrics are listed below. You can configure additional metrics. The measurement is aws_network_firewall. AWS Network Firewall metric details