Hi @vulnfree if you're using the Splunk Add-on for AWS then you DO NOT need to be in a DMZ. Your server just needs outbound internet access to make the API calls.
There are other methods to collect this data (most notably Splunk AWS Project Trumpet) that would require a server in the DMZ for collection. I would recommend using Splunk AWS Project Trumpet if you are expecting very high (>100 GB/day) data volumes. Otherwise you will probably find the Splunk Add-on for AWS to be simpler to configure.
... View more