How Does It Work?
The integration works by configuring OnPage as the endpoint in CloudWatch’s alerting chain. The process is shown below:
1. All resources in your cloud environment, including the VPC, collect configuration, activity and access logs.
2. AWS CloudWatch pulls the log from AWS resources.
3. (a) These logs are compared against configured Rules and CloudWatch Metrics. When user-defined thresholds are passed, a CloudWatch Alarm (CWA) is triggered. The CWA then composes an alert message that is published (sent) to Amazon Simple Notification Service (SNS).
(b) Logs are also evaluated by CloudWatch Events (CWE), which can trigger remediation via AWS Lambda functions. CWEs can also publish alerts to SNS.
4. SNS sends the message to OnPage’s server via an encrypted HTTPS connection, which in turn, sends the message as a high-priority OnPage alert.