Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix for VPC FlowLog issue #7648 #7654

Open
wants to merge 5 commits into
base: main
Choose a base branch
from

Conversation

scoleri
Copy link

@scoleri scoleri commented Aug 12, 2022

fixes: #7648

kapilt
kapilt previously approved these changes Aug 16, 2022
Copy link
Collaborator

@kapilt kapilt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm, thanks

@kapilt kapilt dismissed their stale review August 16, 2022 19:47

might have jumped the gun, needs to pass tests first

c7n/resources/vpc.py Outdated Show resolved Hide resolved
Copy link
Author

@scoleri scoleri left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ok - yah i verified the diff. Thanks.

scoleri and others added 2 commits August 22, 2022 09:12
fl['LogDestination'] = ''
dest_match = (destination is None) or op(
fl['LogDestination'], destination)
if fl.get('LogDestinationType') == "s3":
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like this change will prevent the filter from being able to test cloudwatch destinations. I'm wondering if the original code was close, but needed fl['LogDestination'] --> fl.get('LogDestination') to avoid the KeyError you were seeing.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

VPC flow-logs policy Errors
4 participants