Skip to content

Conversation

@rjjaegeraws
Copy link
Contributor

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

This pull requests implements a new configuration value "guardduty-frequency" with the following possible values: FIFTEEN_MINUTES, ONE_HOUR, SIX_HOURS

By default, the Frequency for updated findings for GuardDuty is set at the default, SIX_HOURS.

Here's an example of the result with the following config:

"guardduty-frequency": "ONE_HOUR",

image

@Brian969 Brian969 changed the title feature: Frequency for updated findings for GuardDuty enhancement: Frequency for updated findings for GuardDuty Sep 29, 2022
@Brian969 Brian969 changed the title enhancement: Frequency for updated findings for GuardDuty (enhancement): Frequency for updated findings for GuardDuty Sep 29, 2022
Copy link
Contributor

@dliggat dliggat left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM @rjjaegeraws. Tested adding and removing guardduty-frequency - setting updated as expected.

@Brian969 Brian969 merged commit b8de577 into aws-samples:main Oct 3, 2022
Brian969 added a commit that referenced this pull request Oct 4, 2022
* add frequency for GuardDuty

* update sample config files with new config option

* add guardduty eks support

* fix for issue with ALB forwarder when no HOSTS defined (#1019)

* Decreasing max concurrency limit to 10 (#1062)

* (Fix): SM jitter (#1050)

* exponential backoff fix

* exponential backoff fix

* Fixed backoff for lambdas

* added backoff in other location

* fixed lambda timeouts and added timeout aspect

* fixed typo

* tweak default max jitter delay to 2s from 5s

Co-authored-by: hickeydh-aws <hickeydh@amazon.com>
Co-authored-by: Brian969 <56414362+Brian969@users.noreply.github.com>

* (docs): Eb faq doc update (#1055)

* added Elastic Beanstalk entry to FAQ

* Update index.md

Co-authored-by: Jahnke <ejahnke@909c4acec9cf.ant.amazon.com>

* (addon): OpenSearch SIEM added CW Alarms (#1056)

* added CW Alarms

* fix typo

Co-authored-by: Brian969 <56414362+Brian969@users.noreply.github.com>

* (enhancement): Frequency for updated findings for GuardDuty (#1057)

* add frequency for GuardDuty

* update sample config files with new config option

* add guardduty eks support

Co-authored-by: rycerrat <42330513+rycerrat@users.noreply.github.com>
Co-authored-by: hickeydh-aws <88673813+hickeydh-aws@users.noreply.github.com>
Co-authored-by: hickeydh-aws <hickeydh@amazon.com>
Co-authored-by: Brian969 <56414362+Brian969@users.noreply.github.com>
Co-authored-by: Elden Jahnke <94935251+ejahnke@users.noreply.github.com>
Co-authored-by: Jahnke <ejahnke@909c4acec9cf.ant.amazon.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Create facility to manage Guard Duty Findings Export settings through ASEA configuration

3 participants