Skip to main content

Microsoft Teams Alert Channel

Configure a Lacework alert channel to forward alerts to a Microsoft Teams channel using an incoming webhook. Before completing the process in the Lacework Console, you must add a Microsoft Teams incoming webhook connector. Lacework recommends creating a dedicated channel for Lacework events.

Create an Incoming Webhook

Do the following:

  1. Navigate to the channel where you want to post Lacework events, select the channel's More options, and select Connectors.
  2. Locate Incoming Webhook and click Add.
  3. You can optionally customize your app by adding a descriptive name or icon.
  4. Copy the URL.
  5. Click Done.

Create a Microsoft Teams Alert Channel

Do the following:

  1. Log in to the Lacework Console as a Lacework user with administrative privileges.
  2. Go to Settings > Notifications > Alert channels.
  3. Click + Add new.
  4. Select Microsoft Teams.
  5. Click Next.

Verify you have created your Lacework-dedicated incoming webhook as described in Create an Incoming Webhook. Then complete the following steps:

  1. Name the alert channel.
  2. Add the URL of your Microsoft Teams incoming webhook.
  3. Click Save.
  4. Click Alert rules and configure your required alert routing details/options by leveraging the alert channel you created.

Lacework alert notifications will now appear in your Microsoft Teams channel.

Create a Lacework Microsoft Teams Alert Channel Using Terraform

For organizations using Terraform to manage their environments, Lacework maintains the Terraform provider for Lacework, which enables configuration of Lacework alert channels using automation.

For a complete list of custom Terraform resources to manage alert channels in Lacework, see Managing Alert Channels with Terraform.

# Configure Microsoft Teams Alert Channel in Lacework
resource "lacework_alert_channel_microsoft_teams" "example" {
name = "Microsoft Teams Alert Channel Example"
webhook_url = "https://outlook.office.com/webhook/api-token"
}

Additional information on the lacework_alert_channel_microsoft_teams resource can be found on the Terraform Registry.