Configure integrations to combine VMware Aria Automation for Secure Clouds with other applications

VMware Aria Automation for Secure Clouds integrations allow users to incorporate third party applications like Slack, Splunk, SQS and more into their cloud security posture for monitoring, alerting, and remediating misconfigurations.

About integrations

VMware Aria Automation for Secure Clouds is designed as an open platform that meets you where you are. Whether you plan to use it as the central hub for monitoring and tracking cloud security issues across your entire or organization or as one more tool in a larger security framework, integrations let you fit the service into your organization the way you need it to.

Integrations are categorized by how they handle data, and what they can help you do.

Inbound integrations

Inbound integrations receive security findings from other sources (like Amazon GuardDuty) so you can review them directly from the service dashboard, building a more complete overview of your organization's security posture. With inbound integrations, you don't need to look at multiple tools to understand your security risks.

VMware Aria Automation for Secure Clouds offers the following inbound integrations:

• Amazon GuardDuty
• Amazon Inspector
• Microsoft Defender for Cloud

Outbound integrations

Outbound integrations send data from the service to an external application. These integrations are often used to create notifications and build them into your existing processes and tools so that you stay current, lean, and responsive to potential threats.

VMware Aria Automation for Secure Clouds offers the following outbound integrations:

• Email
• Jira Cloud
• Slack
• Splunk
• SQS
• Webhook

Manage integrations

You can manage your integrations by going to Settings > Integrations from your dashboard and clicking View Details below your desired integration service.

This displays all the integrations currently in VMware Aria Automation for Secure Clouds for that particular service. From this screen you can decide whether to enable, disable, or delete individual integrations. When you disable an integration, it stops sending or receiving data until you enable it again. Note that inbound integrations for Amazon GuardDuty and Microsoft Defender can't be deleted, only disabled.

Depending on the integration service you can also view any alerts you've created, or edit configuration options for a specific integration.