About the AWS Network Security Integration
AWS Network Security connects Synqly to Amazon VPC Flow Logs, giving security teams visibility into network traffic across AWS environments without standing up custom log pipelines. VPC Flow Logs capture accepted and rejected traffic at the interface level, making them a foundational source for detecting lateral movement, data exfiltration, and misconfigured network paths in cloud infrastructure. Part of Synqly’s Network Security Unified API, the AWS Network Security integration lets security platforms query traffic events and traffic log configurations, normalized to OCSF Network Activity, through a single standardized connector instead of building direct AWS API integrations.
Integration Use Cases
Query DNS Events
Returns DNS events from DNS log configurations on the integration. Results are normalized to OCSF DNS Activity (class_uid 4003).
Query DNS Log Configurations
Returns DNS log configurations discovered for the integration.
Query Firewall Rules
Returns the firewall rules that control traffic within the integration's scope. Built-in default rules that the provider's API does not
report are not included. A rule that applies to several networks is returned once per network
Query Traffic Events
Returns traffic events from traffic log configurations on the integration. Results are normalized to OCSF Network Activity (class_uid 4001).
Query Traffic Log Configurations
Returns traffic log configurations discovered for the integration.
