Teamwork and other improvements in Cloud Advisor

The new version of Cloud Advisor offers enhanced capabilities for teamwork on security risks and cost optimization. We have added a feature to create tickets in Jira for resources, vulnerabilities, or specific alerts. The issue details and CSV attachment are immediately loaded into the task. This dramatically simplifies the process of creating tasks to resolve issues. Next, you can configure Jira yourself to monitor KPI performance for task resolution.

We have also added a log of all user actions performed in Cloud Advisor. Now you can track who issued an API token, created exclusions, or logged into the console, with the time and IP address indicated. If necessary, you can configure the sending of selected events to any delivery channels (SIEM, Telegram, Mattermost, Webhook, email, and others).

The mechanism for adding exclusions has been completely redesigned. You can now add alerts and resources to exclusions based on a wide range of criteria, including support for regular expressions.

Now, the date of detection is logged for alerts. This improvement has made it possible to add the following queries to Insights: “Critical vulnerabilities with a detection date of more than 90 days” and “Critical and High alerts with a detection date of more than 90 days.” This functionality will allow you to process violations of vulnerability and alert resolution deadlines (view and send notifications).

In addition, the update adds support for AlmaLinux in the Host Configuration module (including CIS AlmaLinux benchmark checking).