Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature/quarantine issues list #116

Merged
merged 9 commits into from
Oct 15, 2019
Merged

Conversation

vigneswararaomacharla
Copy link
Contributor

Added quarantine issues feature list.

Update with Quarantine list feature changes
Updated quarantine issue changes.
Updated with quarantine list changes.
Updated with Temp whitlist item changes.

comment = (f"CloudTrail logging issue with '{region}' "
f"in '{account_name} / {account_id}' account is added to temporary whitelist.")
jira.update_issue(
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Will this message be posted to jira for the same issue multiple times (on each reporting phase)?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think we should add this message more than once, at least we shouldn't add it if nothing is changed.

Updated with review comments.
Updated with review comments.
Updated tempwhitelist issue changes.
@@ -41,6 +41,12 @@ def cleans3bucketunencrypted(self, batch=False):

in_whitelist = self.config.s3Encrypt.in_whitelist(account_id, bucket_name)
in_fixlist = True
in_temp_whitelist = self.config.s3Encrypt.in_temp_whitelist(account_id, issue.issue_id)
if in_temp_whitelist:

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This check not required because of method get_account_open_issues return just open issues, so tmpwhitelisted won't be on the list.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

check this below scenario:
Issue Identified. And issue added to temp-whitelisted,
now remediation calls, here we are not checking the Issue status, instead we are checking tempwhitelist json, if issue found in json, we are skipping this. Plz check and let me know.

bu=bu, product=product,
)
IssueOperations.set_status_temp_whitelisted(ddb_table, issue)
elif issue.status in [IssueStatus.Resolved, IssueStatus.Whitelisted]:
Copy link

@pasiechnay pasiechnay Oct 11, 2019

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Create a new ticket without comment, that ticket is temporary whitelisted.
Description contains "Auto-Remediation Date: 2019-10-18"
Ticket#6352

Copy link
Contributor Author

@vigneswararaomacharla vigneswararaomacharla Oct 11, 2019

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Agreed and will update changes. Comment will add in next iteration of reporting calls after ticket creation. For Auto-remediation date will add conditional block.

Updated with review comments.
Updated with review comments.
@oleksii-dowjones oleksii-dowjones merged commit 298e901 into dev Oct 15, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants