Add feature : Security Hub bp check
This commit is contained in:
parent
858aab4eac
commit
14973510db
@ -2,10 +2,27 @@ from models import RuleCheckResult
|
||||
import boto3
|
||||
|
||||
|
||||
# client = boto3.client("")
|
||||
client = boto3.client("securityhub")
|
||||
|
||||
sts_client = boto3.client("sts")
|
||||
|
||||
|
||||
def securityhub_enabled():
|
||||
compliant_resources = []
|
||||
non_compliant_resources = []
|
||||
aws_account_id = sts_client.get_caller_identity()["Account"]
|
||||
|
||||
try:
|
||||
hub = client.describe_hub()
|
||||
compliant_resources.append(aws_account_id)
|
||||
except Exception as e:
|
||||
if e.__class__.__name__ == "InvalidAccessException":
|
||||
non_compliant_resources.append(aws_account_id)
|
||||
else:
|
||||
raise e
|
||||
|
||||
return RuleCheckResult(
|
||||
passed=False, compliant_resources=[], non_compliant_resources=[]
|
||||
passed=not non_compliant_resources,
|
||||
compliant_resources=compliant_resources,
|
||||
non_compliant_resources=non_compliant_resources,
|
||||
)
|
||||
|
Loading…
Reference in New Issue
Block a user