automated-security-response-on-aws

automated-security-response-on-aws copied to clipboard

Describe the bug

SetSSLBucketPolicy.py always uses "aws" partition, causing remediate to fail in GovCloud:

https://github.com/aws-solutions/aws-security-hub-automated-response-and-remediation/blob/main/source/remediation_runbooks/scripts/SetSSLBucketPolicy.py

To Reproduce

1. Create SHARR stacks in GovCloud
2. Select a Security Hub Finding for S3.5 "S3 buckets should require requests to use Secure Socket Layer" and choose Actions > Remediate with SHARR
3. Go to CloudTrail and see "errorCode": "MalformedPolicy", "errorMessage": "Policy has invalid resource"

Expected behavior

SetSSLBucketPolicy remediation working.

Please complete the following information about the solution:

• [ ] Version: v1.5.0
• [ ] Region: us-gov-west-1
• [ ] Was the solution modified from the version published on this repository? No

Thanks for pointing this out. We will add this bug to our backlog to fix in an upcoming release.

This issue has not received a response in a while. If you want to keep this issue open, please leave a comment below and auto-close will be canceled.

This issue was closed because it has been inactive for 7 days since being marked as stale.