Skip to main content

Microsoft Teams

You can configure Lacework to forward alerts to a Microsoft Teams channel through an incoming webhook. Before completing the process in the Lacework Console, you must add a Microsoft Teams incoming webhook connector. Lacework recommends creating a dedicated channel for Lacework events.

Create an Incoming Webhook​

  1. Navigate to the channel where you want to post Lacework events, click the channel's More options, and select Connectors.
  2. Locate Incoming Webhook and click Add.
  3. You can optionally customize your app by adding a descriptive name or icon.
  4. Copy the URL.
  5. Click Done.

For more information about using Microsoft Teams incoming webhooks, refer to Microsoft Teams documentation.

Create a Microsoft Teams Alert Channel from the Lacework Console​

  1. Log in to the Lacework Console as a Lacework user with administrative privileges.
  2. Go to Settings > Notifications > Alert channels.
  3. Click + Add new.
  4. Select Microsoft Teams.
  5. Click Next.
  6. Follow the steps in the next section.

Create a Microsoft Teams Alert Channel​

Ensure you have created your Lacework-dedicated incoming webhook as described in Create an Incoming Webhook. Then complete the following steps:

  1. Name the alert channel.
  2. Add the URL of your Microsoft Teams incoming webhook.
  3. Click Save.
  4. Click Alert rules and configure your required alert routing details/options by leveraging the alert channel you created.

You should now begin to receive Lacework alert notifications in your chosen Microsoft Teams channel.

Create a Lacework Microsoft Teams Alert Channel Using Terraform​

For organizations using Terraform to manage their environments, Lacework maintains the Terraform provider for Lacework, which enables configuration of Lacework alert channels using automation.

If you are new to the Lacework Terraform Provider, or Lacework Terraform Modules, read the Terraform for Lacework Overview to learn the basics on how to configure the provider, and more.

For a complete list of custom Terraform resources to manage alert channels in Lacework, see Managing Alert Channels with Terraform.

# Configure Microsoft Teams Alert Channel in Lacework
resource "lacework_alert_channel_microsoft_teams" "example" {
  name      = "Microsoft Teams Alert Channel Example"
  webhook_url = "https://outlook.office.com/webhook/api-token"
}

Additional information on the lacework_alert_channel_microsoft_teams resource can be found on the Terraform Registry.