in lambda/find-secrets-without-rotation.py [0:0]
def lambda_handler(event, context):
secrets = secret_client.list_secrets()
rotation = {}
for name in secrets['SecretList']:
print('******************')
print (name['Name'])
secret_name = name['Name']
secret_arn = name['ARN']
details = secret_client.describe_secret(
SecretId = name['Name'])
key='RotationRules'
if key in details.keys():
print ("Rotation Defined")
print (details['RotationRules'])
rotation = details['RotationRules']['AutomaticallyAfterDays']
print (rotation)
if rotation > rotation_days_max:
print ("rotation too great")
sechub_result = raise_sechub_event(secret_arn, secret_name, rotation)
else:
print("Rotation within limits")
else:
print ("Rotation not defined")
sechub_result = raise_sechub_event(secret_arn, secret_name, "NONE")
print('******************')
print ("Done evaluating keys")