cfn-guardian 0.1.0

data/lib/cfnguardian/resources/elastic_file_system.rb

@@ -0,0 +1,17 @@
+module CfnGuardian
+  module Resource
+    class ElasticFileSystem < Base
+      
+      def default_alarms    
+        alarm = CfnGuardian::Models::ElasticFileSystemAlarm.new(@resource)
+        alarm.name = 'PercentIOLimitHigh'
+        alarm.metric_name = 'PercentIOLimit'
+        alarm.comparison_operator = 'GreaterThanThreshold'
+        alarm.threshold = 90
+        alarm.evaluation_periods = 5
+        alarm.statistic = 'Minimum'
+        @alarms.push(alarm)
+      end
+    end
+  end
+end

data/lib/cfnguardian/resources/elastic_loadbalancer.rb

@@ -0,0 +1,26 @@
+module CfnGuardian::Resource
+  class ElasticLoadBalancer < Base
+    
+    def default_alarms    
+      alarm = CfnGuardian::Models::ElasticLoadBalancerAlarm.new(@resource)
+      alarm.name = 'HealthyHosts'
+      alarm.metric_name = 'HealthyHostCount'
+      alarm.comparison_operator = 'LessThanThreshold'
+      alarm.statistic = 'Minimum'
+      alarm.threshold = 2
+      alarm.evaluation_periods = 1
+      alarm.treat_missing_data = 'notBreaching'
+      @alarms.push(alarm)
+      
+      alarm = CfnGuardian::Models::ElasticLoadBalancerAlarm.new(@resource)
+      alarm.name = 'UnHealthyHosts'
+      alarm.metric_name = 'UnHealthyHostCount'
+      alarm.threshold = 0
+      alarm.evaluation_periods = 10
+      alarm.treat_missing_data = 'notBreaching'
+      alarm.alarm_action = 'Warning'
+      @alarms.push(alarm)
+    end
+    
+  end
+end

data/lib/cfnguardian/resources/elasticache_replication_group.rb

@@ -0,0 +1,45 @@
+module CfnGuardian
+  module Resource
+    class ElastiCacheReplicationGroup < Base
+      
+      def default_alarms    
+        alarm = CfnGuardian::Models::ElastiCacheReplicationGroupAlarm.new(@resource)
+        alarm.name = 'FreeableMemoryWarning'
+        alarm.metric_name = 'FreeableMemory'
+        alarm.comparison_operator = 'LessThanThreshold'
+        alarm.threshold = 100000000
+        alarm.evaluation_periods = 10
+        alarm.alarm_action = 'Warning'
+        @alarms.push(alarm)
+        
+        alarm = CfnGuardian::Models::ElastiCacheReplicationGroupAlarm.new(@resource)
+        alarm.name = 'CPUUtilizationWarning'
+        alarm.metric_name = 'CPUUtilization'
+        alarm.comparison_operator = 'GreaterThanThreshold'
+        alarm.statistic = 'Minimum'
+        alarm.threshold = 75
+        alarm.evaluation_periods = 10
+        alarm.alarm_action = 'Warning'
+        @alarms.push(alarm)
+        
+        alarm = CfnGuardian::Models::ElastiCacheReplicationGroupAlarm.new(@resource)
+        alarm.name = 'CurrentConnectionsTask'
+        alarm.metric_name = 'CurrConnections'
+        alarm.comparison_operator = 'GreaterThanThreshold'
+        alarm.threshold = 50000
+        alarm.evaluation_periods = 10
+        alarm.alarm_action = 'Task'
+        @alarms.push(alarm)
+        
+        alarm = CfnGuardian::Models::ElastiCacheReplicationGroupAlarm.new(@resource)
+        alarm.name = 'CurrentConnectionsCritical'
+        alarm.metric_name = 'CurrConnections'
+        alarm.comparison_operator = 'GreaterThanThreshold'
+        alarm.threshold = 60000
+        alarm.evaluation_periods = 10
+        @alarms.push(alarm)
+      end
+      
+    end
+  end
+end

data/lib/cfnguardian/resources/http.rb

@@ -0,0 +1,49 @@
+require 'digest/md5'
+
+module CfnGuardian::Resource
+  class Http < Base
+    
+    def default_alarms    
+      alarm = CfnGuardian::Models::HttpAlarm.new(@resource)
+      alarm.name = 'EndpointAvailable'
+      alarm.metric_name = 'Available'
+      @alarms.push(alarm)
+      
+      alarm = CfnGuardian::Models::HttpAlarm.new(@resource)
+      alarm.name = 'EndpointStatusCodeMatch'
+      alarm.metric_name = 'StatusCodeMatch'
+      @alarms.push(alarm)
+            
+      alarm = CfnGuardian::Models::ElasticLoadBalancerAlarm.new(@resource)
+      alarm.name = 'EndpointTimeTaken'
+      alarm.metric_name = 'TimeTaken'
+      alarm.statistic = 'Minimum'
+      alarm.threshold = 1000
+      alarm.period = 300
+      alarm.evaluation_periods = 1
+      @alarms.push(alarm)
+      
+      if @resource.has_key?('BodyRegex')
+        alarm = CfnGuardian::Models::HttpAlarm.new(@resource)
+        alarm.name = 'EndpointBodyRegexMatch'
+        alarm.metric_name = 'ResponseBodyRegexMatch'
+        @alarms.push(alarm)
+      end
+    end
+    
+    def default_events()
+      @events.push(CfnGuardian::Models::HttpEvent.new(@resource))
+      if @resource.has_key?('Ssl') && @resource['Ssl']
+        @events.push(CfnGuardian::Models::SslEvent.new(@resource))
+      end
+    end
+    
+    def default_checks()
+      @checks.push(CfnGuardian::Models::HttpCheck.new(@resource))
+      if @resource.has_key?('Ssl') && @resource['Ssl']
+        @checks.push(CfnGuardian::Models::SslCheck.new(@resource))
+      end
+    end
+    
+  end
+end

data/lib/cfnguardian/resources/lambda.rb

@@ -0,0 +1,38 @@
+module CfnGuardian::Resource
+  class Lambda < Base
+    
+    def default_alarms    
+      alarm = CfnGuardian::Models::LambdaAlarm.new(@resource)
+      alarm.name = 'LambdaErrors'
+      alarm.metric_name = 'Errors'
+      alarm.threshold = 0.5
+      @alarms.push(alarm)
+      
+      alarm = CfnGuardian::Models::LambdaAlarm.new(@resource)
+      alarm.name = 'Throttles'
+      alarm.metric_name = 'Throttles'
+      alarm.threshold = 0.5
+      @alarms.push(alarm)
+      
+      alarm = CfnGuardian::Models::LambdaAlarm.new(@resource)
+      alarm.name = 'DeadLetterErrors'
+      alarm.metric_name = 'DeadLetterErrors'
+      alarm.threshold = 0.5
+      @alarms.push(alarm)
+      
+      alarm = CfnGuardian::Models::LambdaAlarm.new(@resource)
+      alarm.name = 'IteratorAge'
+      alarm.metric_name = 'IteratorAge'
+      alarm.threshold = 600000
+      @alarms.push(alarm)
+      
+      alarm = CfnGuardian::Models::LambdaAlarm.new(@resource)
+      alarm.name = 'Duration'
+      alarm.metric_name = 'Duration'
+      alarm.statistic = 'Average'
+      alarm.threshold = 30
+      @alarms.push(alarm)
+    end
+    
+  end
+end

data/lib/cfnguardian/resources/network_targetgroup.rb

@@ -0,0 +1,31 @@
+module CfnGuardian::Resource
+  class NetworkTargetGroup < Base
+    
+    def default_alarms    
+      alarm = CfnGuardian::Models::NetworkTargetGroupAlarm.new(@resource)
+      alarm.name = 'HealthyHosts'
+      alarm.metric_name = 'HealthyHostCount'
+      alarm.statistic = 'Minimum'
+      alarm.threshold = 2
+      alarm.evaluation_periods = 1
+      @alarms.push(alarm)
+      
+      alarm = CfnGuardian::Models::NetworkTargetGroupAlarm.new(@resource)
+      alarm.name = 'UnHealthyHosts'
+      alarm.metric_name = 'UnHealthyHostCount'
+      alarm.threshold = 0
+      alarm.evaluation_periods = 10
+      alarm.treat_missing_data = 'notBreaching'
+      @alarms.push(alarm)
+      
+      alarm = CfnGuardian::Models::NetworkTargetGroupAlarm.new(@resource)
+      alarm.name = 'TargetResponseTime'
+      alarm.metric_name = 'TargetResponseTime'
+      alarm.threshold = 5
+      alarm.evaluation_periods = 5
+      alarm.treat_missing_data = 'notBreaching'
+      @alarms.push(alarm)
+    end
+    
+  end
+end

data/lib/cfnguardian/resources/nrpe.rb

@@ -0,0 +1,42 @@
+require 'digest/md5'
+require 'cfnguardian/string'
+
+module CfnGuardian::Resource
+  class Nrpe < Base
+    
+    def initialize(resource)
+      super(resource)
+      @resource_list = resource['Hosts']
+      @environment = resource['Environment']
+    end
+    
+    def default_alarms()
+      @resource_list.each do |host|
+        host['Commands'].each do |command|
+          alarm = CfnGuardian::Models::NrpeAlarm.new(host,@environment)
+          alarm.name = "#{command.to_camelcase}Warning"
+          alarm.metric_name = command
+          @alarms.push(alarm)
+          
+          alarm = CfnGuardian::Models::NrpeAlarm.new(host,@environment)
+          alarm.name = "#{command.to_camelcase}Critical"
+          alarm.metric_name = command
+          @alarms.push(alarm)
+        end
+      end
+    end
+    
+    def default_events()
+      @resource_list.each do |host|
+        host['Commands'].each do |command|
+          @events.push(CfnGuardian::Models::NrpeEvent.new(host,@environment,command))
+        end
+      end
+    end
+    
+    def default_checks()
+      @checks.push(CfnGuardian::Models::NrpeCheck.new(@resource))
+    end
+    
+  end
+end

data/lib/cfnguardian/resources/rds_cluster_instance.rb

@@ -0,0 +1,30 @@
+module CfnGuardian::Resource
+  class RDSClusterInstance < Base
+    
+    def default_alarms    
+      alarm = CfnGuardian::Models::RDSClusterInstanceAlarm.new(@resource)
+      alarm.name = 'CPUUtilizationHighSpike'
+      alarm.metric_name = 'CPUUtilization'
+      alarm.threshold = 95
+      alarm.evaluation_periods = 10
+      @alarms.push(alarm)
+      
+      alarm = CfnGuardian::Models::RDSClusterInstanceAlarm.new(@resource)
+      alarm.name = 'CPUUtilizationHighBase'
+      alarm.metric_name = 'CPUUtilization'
+      alarm.threshold = 75
+      alarm.evaluation_periods = 60
+      alarm.alarm_action = 'Warning'
+      @alarms.push(alarm)
+      
+      alarm = CfnGuardian::Models::RDSClusterInstanceAlarm.new(@resource)
+      alarm.name = 'DatabaseConnections'
+      alarm.metric_name = 'DatabaseConnections'
+      alarm.statistic = 'Minimum'
+      alarm.threshold = 45
+      alarm.evaluation_periods = 10
+      @alarms.push(alarm)
+    end
+    
+  end
+end

data/lib/cfnguardian/resources/rds_instance.rb

@@ -0,0 +1,45 @@
+module CfnGuardian::Resource
+  class RDSInstance < Base
+    
+    def default_alarms 
+      alarm = CfnGuardian::Models::RDSInstanceAlarm.new(@resource)
+      alarm.name = 'FreeStorageSpaceCritical'
+      alarm.metric_name = 'FreeStorageSpace'
+      alarm.threshold = 50000000000
+      alarm.evaluation_periods = 1
+      @alarms.push(alarm)
+      
+      alarm = CfnGuardian::Models::RDSInstanceAlarm.new(@resource)
+      alarm.name = 'FreeStorageSpaceTask'
+      alarm.metric_name = 'FreeStorageSpace'
+      alarm.threshold = 100000000000
+      alarm.evaluation_periods = 1
+      alarm.alarm_action = 'Task'
+      @alarms.push(alarm)
+         
+      alarm = CfnGuardian::Models::RDSInstanceAlarm.new(@resource)
+      alarm.name = 'CPUUtilizationHighSpike'
+      alarm.metric_name = 'CPUUtilization'
+      alarm.threshold = 95
+      alarm.evaluation_periods = 10
+      @alarms.push(alarm)
+      
+      alarm = CfnGuardian::Models::RDSInstanceAlarm.new(@resource)
+      alarm.name = 'CPUUtilizationHighBase'
+      alarm.metric_name = 'CPUUtilization'
+      alarm.threshold = 75
+      alarm.evaluation_periods = 60
+      alarm.alarm_action = 'Warning'
+      @alarms.push(alarm)
+      
+      alarm = CfnGuardian::Models::RDSInstanceAlarm.new(@resource)
+      alarm.name = 'DatabaseConnections'
+      alarm.metric_name = 'DatabaseConnections'
+      alarm.statistic = 'Minimum'
+      alarm.threshold = 45
+      alarm.evaluation_periods = 10
+      @alarms.push(alarm)
+    end
+    
+  end
+end

data/lib/cfnguardian/resources/redshift_cluster.rb

@@ -0,0 +1,30 @@
+module CfnGuardian::Resource
+  class RedshiftCluster < Base
+      
+    def default_alarms    
+      alarm = CfnGuardian::Models::RedshiftClusterAlarm.new(@resource)
+      alarm.name = 'CPUUtilizationHighSpike'
+      alarm.metric_name = 'CPUUtilization'
+      alarm.threshold = 95
+      alarm.evaluation_periods = 10
+      @alarms.push(alarm)
+      
+      alarm = CfnGuardian::Models::RedshiftClusterAlarm.new(@resource)
+      alarm.name = 'CPUUtilizationHighBase'
+      alarm.metric_name = 'CPUUtilization'
+      alarm.threshold = 75
+      alarm.evaluation_periods = 60
+      alarm.alarm_action = 'Warning'
+      @alarms.push(alarm)
+      
+      alarm = CfnGuardian::Models::RedshiftClusterAlarm.new(@resource)
+      alarm.name = 'UnHealthyCluster'
+      alarm.metric_name = 'HealthStatus'
+      alarm.threshold = 0
+      alarm.evaluation_periods = 10
+      alarm.treat_missing_data = 'notBreaching'
+      @alarms.push(alarm)
+    end
+    
+  end
+end

data/lib/cfnguardian/resources/sql.rb

@@ -0,0 +1,37 @@
+require 'digest/md5'
+require 'cfnguardian/string'
+
+module CfnGuardian::Resource
+  class Sql < Base
+    
+    def initialize(resource)
+      super(resource)
+      @resource_list = resource['Hosts']
+      @environment = resource['Environment']
+    end
+    
+    def default_alarms()
+      @resource_list.each do |host|
+        host['Queries'].each do |query|
+          alarm = CfnGuardian::Models::SqlAlarm.new(host)
+          alarm.name = query['MetricName']
+          alarm.metric_name = query['MetricName']
+          @alarms.push(alarm)
+        end
+      end
+    end
+    
+    def default_events()
+      @resource_list.each do |host|
+        host['Queries'].each do |query|
+          @events.push(CfnGuardian::Models::SqlEvent.new(host,query['Query']))
+        end
+      end
+    end
+    
+    def default_checks()
+      @checks.push(CfnGuardian::Models::SqlCheck.new(@resource))
+    end
+    
+  end
+end

data/lib/cfnguardian/resources/sqs_queue.rb

@@ -0,0 +1,23 @@
+module CfnGuardian::Resource
+  class SQSQueue < Base
+    
+    def default_alarms    
+      alarm = CfnGuardian::Models::SQSQueueAlarm.new(@resource)
+      alarm.name = 'ApproximateAgeOfOldestMessage'
+      alarm.metric_name = 'ApproximateAgeOfOldestMessage'
+      alarm.threshold = 0.5
+      alarm.evaluation_periods = 5
+      alarm.treat_missing_data = 'notBreaching'
+      @alarms.push(alarm)
+      
+      alarm = CfnGuardian::Models::SQSQueueAlarm.new(@resource)
+      alarm.name = 'ApproximateNumberOfMessagesVisible'
+      alarm.metric_name = 'ApproximateNumberOfMessagesVisible'
+      alarm.threshold = 0.5
+      alarm.evaluation_periods = 5
+      alarm.treat_missing_data = 'notBreaching'
+      @alarms.push(alarm)
+    end
+    
+  end
+end

data/lib/cfnguardian/s3.rb

@@ -0,0 +1,35 @@
+require 'aws-sdk-s3'
+
+module CfnGuardian
+  class S3
+    include Logging
+
+    attr_reader :bucket
+
+    def initialize(bucket)
+      @bucket = set_bucket_name(bucket)
+    end
+
+    def set_bucket_name(bucket)
+      if bucket.nil?
+        sts = Aws::STS::Client.new
+        account_id = sts.get_caller_identity().account
+        return "#{account_id}.#{Aws.config[:region]}.guardian.templates"
+      end
+      return bucket
+    end
+
+    def create_bucket_if_not_exists()
+      s3 = Aws::S3::Client.new
+      begin
+        s3.head_bucket(bucket: @bucket)
+        logger.info("Found bucket #{@bucket}")
+      rescue
+        logger.info("Creating bucket #{@bucket}")
+        s3.create_bucket(bucket: @bucket)
+      end
+      return bucket
+    end
+    
+  end
+end