in automated-actions/AWS_RISK_CREDENTIALS_EXPOSED/lambda_functions/notify_security.py [0:0]
def lambda_handler(event, context):
if event.get('error-info') is not None:
publish_msg("Security Alert: Exposed IAM Key - Error Deleting Key", ERROR_MSG)
return
account_id = event['account_id']
username = event['username']
deleted_key = event['deleted_key']
time_discovered = event['time_discovered']
event_names = event['event_names']
resource_names = event['resource_names']
resource_types = event['resource_types']
subject = 'Security Alert: Exposed IAM Key For User {} On Account {}'.format(username, account_id)
print("Generating message body...")
event_summary = generate_summary_str(event_names)
rname_summary = generate_summary_str(resource_names)
rtype_summary = generate_summary_str(resource_types)
message = TEMPLATE.format(time_discovered,
deleted_key,
username,
account_id,
event_summary,
rname_summary,
rtype_summary
)
print("Publishing message...")
publish_msg(subject, message)