andrew-kline

There is a misconfiguration in the filter pattern for the instance_profile_abnormal_usage metric filter. The IP -> assumed role for the easy path is currently source_ip == easy_instance_ip && useridentity.arn ==...

vulnerable_lambda resource_cleaning.sh needs aws profile

6

Hi there, Loved the new vulnerable_lambda scenario, thanks so much for pushing this out. Noticed during clean up that the iam module runs the resource_cleaning.sh (scenarios/vulnerable_lambda/terraform/resource_cleaning.sh) makes AWS calls, but...

Fixed partitioning issue during raw to parquet

1

Changed mappings in glue_etl.py to tie the Glue-given "partition_[0-6]" names to awslogs, account, region, etc. This should fix the errors being referenced in Issue 1.

Password in URL Regex will skip anything with the letter "s"

1

The password in URL regex `[a-zA-Z]{3,10}://[^/\\s:@]{3,20}:[^/\\s:@]{3,20}@.{1,100}[\"'\\s]` skips any URL with a username or password that contains the letter "s".