Skip to content
This repository has been archived by the owner on May 13, 2021. It is now read-only.

Commit

Permalink
Fix refs from RDS to S3.
Browse files Browse the repository at this point in the history
  • Loading branch information
dlahn committed Oct 8, 2019
1 parent f1bd11c commit d07c84e
Show file tree
Hide file tree
Showing 3 changed files with 6 additions and 8 deletions.
6 changes: 3 additions & 3 deletions README.mdown
Original file line number Diff line number Diff line change
Expand Up @@ -7,14 +7,14 @@ This is a part of the [Garrison](https://github.com/forward3d/garrison) security

| Function Name | Description |
| ------------- | ------------- |
| `check_encryption` | Alerts if encryption is not enabled for an RDS instance. |
| `check_encryption` | Alerts if encryption is not enabled for an S3 bucket. |
| `check_public_access_block` | Alerts if there are any buckets defined without a public access block. |

### Installation & Example

Docker Hub - https://hub.docker.com/r/forward3d/garrison-agent-aws-rds/
Docker Hub - https://hub.docker.com/r/forward3d/garrison-agent-aws-s3/

docker pull forward3d/garrison-agent-aws-rds
docker pull forward3d/garrison-agent-aws-s3
docker run --rm -e "GARRISON_URL=https://garrison.internal.acme.com" forward3d/garrison-agent-aws-s3 check_encryption
docker run --rm -e "GARRISON_URL=https://garrison.internal.acme.com" -e "GARRISON_AWS_REGIONS=eu-west-1,us-west-2" forward3d/garrison-agent-aws-s3 check_public_access

Expand Down
5 changes: 2 additions & 3 deletions garrison/checks/check_encryption.rb
Original file line number Diff line number Diff line change
Expand Up @@ -8,13 +8,12 @@ def settings
self.family ||= 'infrastructure'
self.type ||= 'compliance'
self.options[:regions] ||= 'all'
self.options[:engines] ||= 'all'
end

def key_values
[
{ key: 'datacenter', value: 'aws' },
{ key: 'aws-service', value: 'rds' },
{ key: 'aws-service', value: 's3' },
{ key: 'aws-account', value: AwsHelper.whoami }
]
end
Expand Down Expand Up @@ -75,7 +74,7 @@ def unecrypted_s3(region)
end
end
end
puts unencrypted_buckets.count

unencrypted_buckets
end
end
Expand Down
3 changes: 1 addition & 2 deletions garrison/checks/check_public_access_block.rb
Original file line number Diff line number Diff line change
Expand Up @@ -8,13 +8,12 @@ def settings
self.family ||= 'infrastructure'
self.type ||= 'compliance'
self.options[:regions] ||= 'all'
self.options[:engines] ||= 'all'
end

def key_values
[
{ key: 'datacenter', value: 'aws' },
{ key: 'aws-service', value: 'rds' },
{ key: 'aws-service', value: 's3' },
{ key: 'aws-account', value: AwsHelper.whoami }
]
end
Expand Down

0 comments on commit d07c84e

Please sign in to comment.