Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[SecurityHub] InvalidAccessException when account is not subscribed #65

Closed
thejazzid opened this issue Dec 4, 2020 · 4 comments
Closed
Assignees
Labels
bug Something isn't working

Comments

@thejazzid
Copy link

thejazzid commented Dec 4, 2020

Would it be possible to add feature, to proceed on some errors, for example if no services enabled, but still be able to collect other information?
/Users/user/.rvm/gems/ruby-2.6.5/gems/aws-sdk-core-3.109.1/lib/seahorse/client/plugins/raise_response_errors.rb:17:in 'call': Account 123123123123 is not subscribed to AWS Security Hub (Aws::SecurityHub::Errors::InvalidAccessException)

@joshlarsen joshlarsen self-assigned this Dec 4, 2020
@joshlarsen joshlarsen added the enhancement New feature or request label Dec 4, 2020
@joshlarsen
Copy link
Owner

joshlarsen commented Dec 4, 2020

Hi @thejazzid, yes this is planned. This will likely have two components:

  1. for errors that are related to service availability, silently ignore and continue. This is what we currently do, but it looks like we missed EMR.
  2. for errors that are due to lack of permissions, ignore by default, with a command line option to raise the error.

@joshlarsen
Copy link
Owner

Also, @thejazzid, what region were you getting that EMR error from?

@thejazzid
Copy link
Author

thejazzid commented Dec 5, 2020

@joshlarsen Thanks for info. will be looking forward for new releases. I would love to contribute, but I'm not ruby guy.

As for region - according to last successful commands it was ap-east-1

t7.ap-east-1.EC2.describe_vpc_peering_connections.0
t3.ap-east-1.RDS.describe_db_engine_versions.0
t3.ap-east-1.RDS.describe_db_engine_versions.1
t3.ap-east-1.RDS.describe_db_engine_versions.2
t3.ap-east-1.RDS.describe_db_engine_versions.3

Finished in 240 seconds. Saving resources to..... 

@joshlarsen
Copy link
Owner

Splitting this into two issues. The EMR issue is now #67.

@joshlarsen joshlarsen added bug Something isn't working and removed enhancement New feature or request labels Dec 5, 2020
@joshlarsen joshlarsen changed the title [Feature request] continue on error [SecurityHub] InvalidAccessException when account is not subscribed Dec 5, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants