PagerDuty

You can configure Lacework to forward events to PagerDuty using the PagerDuty Events API v2. Lacework requires an Events v2 integration key, and alerts and incidents must be enabled. Integration keys are generated by creating a new service or by creating a new integration for an existing service.

For more details regarding integration keys and their creation, refer to PagerDuty documentation: Events and REST APIs.

After you have your PagerDuty Integration key, return to the Lacework Console and complete the following steps:

1. Log in to the Lacework Console with a Lacework user that has administrative privileges.
2. Select Settings > Integrations.
3. Under OUTGOING, select PagerDuty.
4. Click + Add Integration.
5. Name the integration.
6. Add your integration key.
7. Select an alert level; Lacework forwards events that only meet or exceed the chosen threshold.
8. Click Save.

You should now start to receive Lacework event notifications in PagerDuty.