Resource groups provide a way to categorize Lacework-identifiable assets.
Account-level resource groups allow you to categorize multiple assets that are identified by Lacework. These can include cloud accounts, containers, or machines. You can use resource groups for granular alert routing.
Within each Lacework account, Lacework creates a default resource group for each resource type that already has an integration. A default resource group contains all assets of that type. Default resource groups cannot be deleted or edited.
After a resource type is integrated with Lacework, you can create a resource group for that type.
- Navigate to Settings > Configuration > Resource groups.
- Click + Add New.
- Select the group type from the list and click Next.
- Name the resource group and optionally add a description.
- Complete the fields for the resource type.
The Machine group type supports the * wildcard when you manually enter machine tags.
- Click Save.
A new resource group displays in the table.
Organization-level resource groups can contain only Lacework accounts.