Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Resource dynamoDB-table wrong cloudtrail event source #1751

Closed
cpollard0 opened this issue Nov 7, 2017 · 2 comments
Closed

Resource dynamoDB-table wrong cloudtrail event source #1751

cpollard0 opened this issue Nov 7, 2017 · 2 comments
Labels

Comments

@cpollard0
Copy link
Contributor

cpollard0 commented Nov 7, 2017

Following policy:

  • name: ddb-auto-tag-user
    resource: dynamodb-table
    mode:
    type: cloudtrail
    role: arn:aws:iam::{account_id}:role/service-role/custodianrole
    events:
    - CreateTable
    filters:
    • tag:creator: absent
      actions:
    • type: auto-tag-user
      tag: creator

results in a cloudtrail event pattern that looks like:
{ "detail": { "eventName": [ "CreateTable" ], "eventSource": [ "dynamodb.amazonaws.com\"" ] }, "detail-type": [ "AWS API Call via CloudTrail" ] }
The extra quote in EventSource causes the Lambda not to fire.

@kapilt
Copy link
Collaborator

kapilt commented Nov 18, 2017

thanks for the bug report.

@cpollard0
Copy link
Contributor Author

Fixed it in this PR: #1879

@cpollard0 cpollard0 reopened this Dec 8, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants