How can I find the log source of an SQS queue in Panther

Last updated: September 3, 2024

QUESTION

How can I find the log source an SQS queue belongs to in Panther?

ANSWER

Let's assume that the name of the SQS queue is panther-log-source-xxxxxxxxxxxxxxxxxx. The log source ID is the sequence of numbers that appears right after -log-source-, therefore, in this case, it's xxxxxxxxxxxxxxxxxx.

Below you can see an example screenshot from a log source, where the aforementioned naming pattern is depicted:

clipboard_ec49c35e3416b56a391b3ab2c6d5d70e0.png

If you'd like to find the ARN of your Panther SQS queue log source, then you can refer to our article📄 What is the ARN of my Panther SQS queue log source?