diff --git a/relationships/candidates/AWSS3BUCKET.yml b/relationships/candidates/AWSS3BUCKET.yml index 64245e380..e7c4351f1 100644 --- a/relationships/candidates/AWSS3BUCKET.yml +++ b/relationships/candidates/AWSS3BUCKET.yml @@ -14,3 +14,18 @@ lookups: action: CREATE_UNINSTRUMENTED uninstrumented: type: AWSS3BUCKET + + - entityTypes: + - domain: INFRA + type: AWSS3BUCKET + tags: + matchingMode: ANY + predicates: + - tagKeys: ["aws.Arn"] + field: awsS3arn + onMatch: + onMultipleMatches: RELATE_ALL + onMiss: + action: CREATE_UNINSTRUMENTED + uninstrumented: + type: AWSS3BUCKET \ No newline at end of file diff --git a/relationships/synthesis/INFRA-AWSKINESISFIREHOSE-to-INFRA-AWSS3BUCKET.yml b/relationships/synthesis/INFRA-AWSKINESISFIREHOSE-to-INFRA-AWSS3BUCKET.yml new file mode 100644 index 000000000..78b95b571 --- /dev/null +++ b/relationships/synthesis/INFRA-AWSKINESISFIREHOSE-to-INFRA-AWSS3BUCKET.yml @@ -0,0 +1,24 @@ +relationships: + - name: awsKinesisFireHoseProducesAwsS3Bucket + version: "1" + origins: + - AWS Integration + conditions: + - attribute: eventType + anyOf: [ "Metric" ] + - attribute: entity.type + anyOf: [ "AWS_KINESIS_DELIVERY_STREAM" ] + relationship: + expires: P75M + relationshipType: PRODUCES + source: + extractGuid: + attribute: entity.guid + entityType: + value: AWS_KINESIS_DELIVERY_STREAM + target: + lookupGuid: + candidateCategory: AWSS3BUCKET + fields: + - field: awsS3arn + attribute: aws.firehose.s3DestinationBucket