Create an SQS queue and configure S3 ObjectCreated notifications

Before you can add a log source in IBM QRadar, you must create an SQS queue and configure S3 ObjectCreated notifications in the AWS Management Console when you use the Amazon AWS S3 REST API protocol.

Complete the following procedures:
  1. Finding the S3 Bucket that contains the data that you want to collect.
  2. Creating the SQS queue that is used to receive the ObjectCreated notifications from the S3 Bucket that you used in Step 1.
  3. Setting up SQS queue permissions.
  4. Creating ObjectCreated notifications.
  5. Configuring security credentials for your AWS user account.
  6. Adding an AWS Config log source on the QRadar Console using an SQS queue.