cfn-guardian 0.10.0 → 0.10.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5c46c2a4b2730c333ff1e85810cd65f9fb8df414f4109e7c2959c4c9bfda3b43
-  data.tar.gz: f47115047e95163b834b80577dce76b81903c98611178bfd3348183f7bc599c1
+  metadata.gz: 19ef61efb4a240960a8ad0818184f1cdea82dc186ab48a7ed7c645b7b2f57a69
+  data.tar.gz: d2d6c30ea763f40b3ee726738a9c8b63a96b7844a01b0ec68aacd684f4f9f906
 SHA512:
-  metadata.gz: 56b5fff929781714f5b006c2589145e9780cdd65ceb1b993513f0a8d52581eb2e5f4898b795a983718c81a477c57ee906466a3f93d4778633b18bb0c413facb2
-  data.tar.gz: 636bd4eed99c7a26febce34dc77ad581900dd23072b2f5770e6ac45b1f5030539b8b9d7c43d691c806bec9b1fa5ed3c0e619dd9652e31d74ea1c898234a7c51b
+  metadata.gz: aba8ad3df1ba1491b4fb66532775c3383e094c6eddb957eb5fbaeab891f7624bd48547c88f247c2e089cadb91dd4ea441941bb96609d4e8879a67f1e76e0e8c5
+  data.tar.gz: 4a5bf9ea7c2649b143c881499ab5af42781703f7855d118433dc11aabef5ac6ed2905e61466b78373194a3d3282307f7d2578ae587cee5a430f560215caaa4d4

data/.github/workflows/build-gem.yml

@@ -11,15 +11,19 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v2
-    - name: set up ruby 2.7
-      uses: actions/setup-ruby@v1
+    - name: Check out the repo
+      uses: actions/checkout@v3
+    
+    - name: Set up ruby 2.7
+      uses: ruby/setup-ruby@v1
       with:
-        ruby-version: 2.7.x
+        ruby-version: 2.7
+
     - name: rspec
       run: |
         gem install rspec
         rspec
+
     - name: build gem
       run: |
         gem build cfn-guardian.gemspec

data/.github/workflows/push.yml

@@ -12,7 +12,7 @@ jobs:
 
     steps:
     - name: Check out the repo
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
 
     - name: Inject slug/short variables
       uses: rlespinasse/github-slug-action@v3.x  

data/.github/workflows/release-gem.yml

@@ -11,12 +11,12 @@ jobs:
 
     steps:
     - name: Check out the repo
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
     
     - name: Set up ruby 2.7
-      uses: actions/setup-ruby@v1
+      uses: ruby/setup-ruby@v1
       with:
-        ruby-version: 2.7.x
+        ruby-version: 2.7
     
     - name: Publish gem
       uses: dawidd6/action-publish-gem@v1

data/.github/workflows/release-image.yml

@@ -11,7 +11,7 @@ jobs:
 
     steps:
     - name: Check out the repo
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
 
     - name: Set up Docker Buildx
       uses: docker/setup-buildx-action@v1

data/docs/custom_checks/ecs_container_instance_check.md

@@ -13,6 +13,6 @@ Resources:
 Templates:
   ECSCluster:
     # override the alarm defaults
-    ECSContianerInstancesDisconnected:
+    ECSContainerInstancesDisconnected:
       ...
 ```

data/lib/cfnguardian/models/check.rb

@@ -53,7 +53,7 @@ module CfnGuardian
         @name = 'WebSocketCheck'
         @package = 'websocket-check'
         @handler = 'handler.websocket_check'
-        @version = '1f242f6741f6b561f22f6761a1287e7a0b69d06f'
+        @version = 'fb374fcf606b921d3745d7171d81ab5a32135d2f'
         @runtime = 'python3.7'
         @branch = 'main'
       end
@@ -163,9 +163,9 @@ module CfnGuardian
         super(resource)
         @group = 'ContainerInstance'
         @name = 'ContainerInstanceCheck'
-        @package = 'ecs-containder-instance-check'
+        @package = 'ecs-container-instance-check'
         @handler = 'handler.run_check'
-        @version = '4f650d5846d6e8d19f0139bccdeeb147f03f0dd6'
+        @version = '387446fbe2eb18fb4f75462c27cc07caad4a26b8'
         @runtime = 'python3.7'
       end
     end

data/lib/cfnguardian/models/event.rb

@@ -89,7 +89,7 @@ module CfnGuardian
         @endpoint = resource['Id']
         @message = resource.fetch('Message',nil)
         @expected_response = resource.fetch('Expected_Response',nil)
-        @timeout = resource.fetch('Timeout',50)
+        @timeout = resource.fetch('Timeout',30)
         @payload = resource.fetch('Payload',nil)
       end
       
@@ -97,7 +97,8 @@ module CfnGuardian
         payload = {
           'ENDPOINT' => @endpoint,
           'MESSAGE' => @message,
-          'EXPECTED_RESPONSE' => @expected_response
+          'EXPECTED_RESPONSE' => @expected_response,
+          'TIMEOUT' => @timeout
         }
         payload['PAYLOAD'] = @payload unless @payload.nil?
         return payload.to_json

data/lib/cfnguardian/resources/ecs_cluster.rb

@@ -23,8 +23,8 @@ module CfnGuardian::Resource
       
       alarm = CfnGuardian::Models::ECSClusterAlarm.new(@resource)
       alarm.namespace = 'EcsCICheck'
-      alarm.name = 'ECSContianerInstancesDisconnected'
-      alarm.metric_name = 'ECSContianerInstancesDisconnected'
+      alarm.name = 'ECSContainerInstancesDisconnected'
+      alarm.metric_name = 'ECSContainerInstancesDisconnected'
       alarm.alarm_action = 'Critical'
       alarm.threshold = 0
       alarm.period = 300

data/lib/cfnguardian/resources/elastic_search.rb

@@ -20,6 +20,7 @@ module CfnGuardian::Resource
         alarm.evaluation_periods = 5
         alarm.datapoints_to_alarm = 3
         alarm.alarm_action = 'Warning'
+        alarm.enabled = false
         @alarms.push(alarm)
 
         alarm = CfnGuardian::Models::ElasticSearchAlarm.new(@resource)
@@ -28,6 +29,7 @@ module CfnGuardian::Resource
         alarm.threshold = 92
         alarm.evaluation_periods = 5
         alarm.alarm_action = 'Critical'
+        alarm.enabled = false
         @alarms.push(alarm)
 
         alarm = CfnGuardian::Models::ElasticSearchAlarm.new(@resource)

data/lib/cfnguardian/resources/lambda.rb

@@ -6,18 +6,24 @@ module CfnGuardian::Resource
       alarm.name = 'LambdaErrors'
       alarm.metric_name = 'Errors'
       alarm.threshold = 0.5
+      alarm.evaluation_periods = 1
+      alarm.datapoints_to_alarm = 1
       @alarms.push(alarm)
       
       alarm = CfnGuardian::Models::LambdaAlarm.new(@resource)
       alarm.name = 'Throttles'
       alarm.metric_name = 'Throttles'
       alarm.threshold = 0.5
+      alarm.evaluation_periods = 1
+      alarm.datapoints_to_alarm = 1
       @alarms.push(alarm)
       
       alarm = CfnGuardian::Models::LambdaAlarm.new(@resource)
       alarm.name = 'DeadLetterErrors'
       alarm.metric_name = 'DeadLetterErrors'
       alarm.threshold = 0.5
+      alarm.evaluation_periods = 1
+      alarm.datapoints_to_alarm = 1
       @alarms.push(alarm)
       
       alarm = CfnGuardian::Models::LambdaAlarm.new(@resource)

data/lib/cfnguardian/stacks/main.rb

@@ -81,6 +81,17 @@ module CfnGuardian
             }]
           }
         }
+        policies << {
+          PolicyName: 'container-instance-check',
+          PolicyDocument: {
+            Version: '2012-10-17',
+            Statement: [{
+              Effect: 'Allow',
+              Action: [ 'ecs:ListContainerInstances' ],
+              Resource: '*'
+            }]
+          }
+        }
         if ssm_parameters.any?
           policies << {
             PolicyName: 'ssm-parameters',

data/lib/cfnguardian/version.rb

@@ -1,4 +1,4 @@
 module CfnGuardian
-  VERSION = "0.10.0"
+  VERSION = "0.10.4"
   CHANGE_SET_VERSION = VERSION.gsub('.', '-').freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: cfn-guardian
 version: !ruby/object:Gem::Version
-  version: 0.10.0
+  version: 0.10.4
 platform: ruby
 authors:
 - Guslington
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2022-11-10 00:00:00.000000000 Z
+date: 2023-01-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: thor