Skip to main content

Lacework for AWS - FAQs

Does Lacework use AWS Config service to pull configuration resources?

No, Lacework uses AWS configuration data pulled via API.

However, Lacework polls the status of AWS Config service to determine the status of the Service across regions in order to apply Compliance and Benchmarks against the service.

Can I search raw CloudTrail events in Lacework, and what frequency can I alert on these?

Through LQL, you can search the CloudTrailRawEvents data source on your Lacework tenant. Frequency for alerting is 1hr or 24hr periods.