Skip to content

v0.6.0 — VirusTotal, Audit Trail & Egress Notifications

Choose a tag to compare

View all tags
@gofastercloud gofastercloud released this 11 Feb 00:45
· 20 commits to main since this release
v0.6.0
0ca8e50
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Added

  • VirusTotal hash lookup scanning — optional SHA-256 hash check against the VirusTotal API. Files that pass GuardDuty are checked against VT; those with detections at or above virustotal_threshold are quarantined. API key stored as SSM SecureString.
  • File processing audit trail — optional DynamoDB table records every file at each pipeline stage (received, GuardDuty, VirusTotal, prompt injection, routed) with configurable TTL retention via audit_trail_retention_days.
  • Egress notifications — optional SNS topic fires when clean files reach the egress bucket, enabling downstream automation.
  • CloudWatch dashboard metric filters — expanded dashboard with VirusTotal scan metrics, prompt injection metrics, and egress notification tracking.
  • New variables — enable_virustotal_scanning, virustotal_api_key, virustotal_threshold, enable_egress_notifications, egress_notification_emails, enable_audit_trail, audit_trail_retention_days, enable_cloudwatch_dashboard.
  • New outputs — virustotal_scanner_function_arn, egress_sns_topic_arn, audit_trail_table_arn, audit_trail_table_name, cloudwatch_dashboard_arn.
Assets 2
Loading