New Relic Synthetics
Private Location Key
Service Name: New Relic Synthetics
Service Description: New Relic Synthetics is a proactive monitoring service that allows users to monitor websites, critical business transactions, and API endpoints from various locations around the world. Private locations allow customers to run synthetic monitors from their own infrastructure.
Service Address: https://newrelic.com/products/synthetics
Validation Type: API Auth
IP Allow list: IP restrictions can be configured at the account level through New Relic's security settings.
Secret Access Scope: Grants access to deploy and manage private minions (monitoring agents) in customer-controlled environments, allowing synthetic monitoring from behind firewalls or in private networks.
Secret Revokement URL: https://docs.newrelic.com/docs/synthetics/synthetic-monitoring/private-locations/install-containerized-private-minions/#revoke-key
Secret Example: MzU5MjAwfFByaXZhdGVMb2NhdGlvbnxhYmMxMjM0NTY3ODkwYWJjZGVmMTIzNDU2Nzg5MGFiY2 RlZjEyMzQ1
Suspicious Activity Investigation Instructions:
- Review New Relic logs for unauthorized private location registrations
- Check for unexpected synthetic monitors being created or modified
- Monitor for unusual traffic patterns or test executions from private locations
- Verify that all private locations in your account are legitimate and expected
- Review API access logs for unauthorized calls using the private location key
Mitigation Instructions:
- Log in to your New Relic account and navigate to Synthetics > Private Locations
- Identify the compromised private location key
- Click on the private location and select "Revoke Key"
- Generate a new key if needed for legitimate private locations
- Update all legitimate private location configurations with the new key
- Review and update access controls for who can manage private locations
- Consider implementing IP restrictions at the account level if not already in place
- Audit all synthetic monitors to ensure they are legitimate