cfn-guardian 0.7.1 → 0.7.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 72248fcb349fb266e18552dd36dcff37b4757574fb91583092dad34037c8be5f
-  data.tar.gz: f3db4dfb6d7d91e4e39a6832b832d6b2dc75537b0de0a31aaa2ad0837389a4bd
+  metadata.gz: 6d76bc093ba8dfbbc3cd69f13a46de04ed09c66e858a429841345e372b5cd989
+  data.tar.gz: ef0871d219f893b3f048fa6e6aed1985321ca731e3aa7579e4b345593719bc4f
 SHA512:
-  metadata.gz: d8bc7d02245dde79df68affc7bc910b7c9657172b0473bb48e71e03e39cd83d6869e649ec362cc7592c31900bf5338f809001f2efac177c2c0b3a33fe326f333
-  data.tar.gz: 6b7789eca2cbfeefe60d997de944d004bc481d27db7b8c49bfb016ed0924bff971503d34288caf56d787cc4145426988734b146ec9cdcd7addc8eebf5049fe29
+  metadata.gz: a6c49d85573e1032d893a1142a8b578be35cdf795dbc42e82159309bd8e98d8894cf8260eb6c0762ffdc3e23b538317347db5696ada71cdf7bab03375a5843cb
+  data.tar.gz: 959866a604e7cd3c668ba2e99ac28ca1f74ae5ac6fe65fd452840e9d3b4d2a9d248f93a5591319bcc04e92cd210c3341eaa0e9c2d5ff9be8f63f342468212d51

data/.gitignore

@@ -9,4 +9,5 @@
 
 cfn-guardian-*.gem
 
-out/
+out/
+alarms.yaml

data/Dockerfile

@@ -1,6 +1,6 @@
 FROM ruby:2.7-alpine
 
-ARG GUARDIAN_VERSION="0.6.9"
+ARG GUARDIAN_VERSION="0.7.1"
 
 COPY . /src
 

data/docs/custom_checks/http.md

@@ -32,6 +32,8 @@ Resources:
     Method: post
     # specify headers using "key=value key=value"
     Headers: content-type=application/json
+    # specify a useragent that contains spaces
+    UserAgent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:15.0) Gecko/20100101 Base2/Lambda
     # pass in custom payload for the request
     Payload: '{"name": "john"}'
 ```

data/docs/custom_checks/log_group_metric_filters.md

@@ -15,10 +15,20 @@ Resources:
     # Name of the cloud watch metric
     - MetricName: MyFunctionErrors
       # search pattern, see aws docs for syntax
-      Pattern: error
+      Pattern: 'error'
       # metric to push to cloudwatch. Optional as it defaults to 1
       MetricValue: 1
-      
+  - Id: /prod/custom/app
+    # List of metric filters
+    MetricFilters:
+    # Name of the cloud watch metric
+    - MetricName: MyAppErrors
+      # search pattern, see aws docs for syntax
+      # note; any non-alphanumeric characters have to be wrapped in double quotes WITHIN single quotes
+      Pattern: '"Connection to ssl://mail.google.com:465 Timed Out"'
+      # metric to push to cloudwatch. Optional as it defaults to 1
+      MetricValue: 1      
+
 Templates:
   LogGroup:
     # use the MetricName name to override the alarm defaults

data/lib/cfnguardian/compile.rb

@@ -44,6 +44,7 @@ require 'cfnguardian/resources/step_functions'
 require 'cfnguardian/resources/vpn_tunnel'
 require 'cfnguardian/resources/vpn_connection'
 require 'cfnguardian/resources/elastic_search'
+require 'cfnguardian/resources/jenkins'
 require 'cfnguardian/version'
 require 'cfnguardian/error'
 

data/lib/cfnguardian/models/alarm.rb

@@ -485,6 +485,15 @@ module CfnGuardian
       end
     end
 
+    class JenkinsAlarm < BaseAlarm
+      def initialize(resource)
+        super(resource)
+        @group = 'Jenkins'
+        @namespace = 'Ciinabox/Jenkins'
+        @dimensions = { Jenkins: resource['Id'], Monitoring: 'JenkMon' }
+      end
+    end
+
     class VPNTunnelAlarm < BaseAlarm
       def initialize(resource)
         super(resource)

data/lib/cfnguardian/models/check.rb

@@ -40,7 +40,7 @@ module CfnGuardian
         @name = 'HttpCheck'
         @package = 'http-check'
         @handler = 'handler.http_check'
-        @version = 'dba2670c753d0d3386937fbcc1fc89499a4a0fa7'
+        @version = '0e945240f9d93242f807e86d1a9b3383a1764b96'
         @runtime = 'python3.7'
       end
     end

data/lib/cfnguardian/models/event.rb

@@ -52,6 +52,7 @@ module CfnGuardian
         @status_code = resource.fetch('StatusCode',200)
         @body_regex = resource.fetch('BodyRegex',nil)
         @headers = resource.fetch('Headers',nil)
+        @user_agent = resource.fetch('UserAgent',nil)
         @payload = resource.fetch('Payload',nil)
         @compressed = resource.fetch('Compressed',false)
       end
@@ -65,6 +66,7 @@ module CfnGuardian
         }
         payload['BODY_REGEX_MATCH'] = @body_regex unless @body_regex.nil?
         payload['HEADERS'] = @headers unless @headers.nil?
+        payload['USER_AGENT'] = @user_agent unless @user_agent.nil?
         payload['PAYLOAD'] = @payload unless @payload.nil?
         payload['COMPRESSED'] = '1' if @compressed
         return payload.to_json

data/lib/cfnguardian/resources/amazonmq_broker.rb

@@ -13,7 +13,7 @@ module CfnGuardian::Resource
       @alarms.push(alarm)
       
       alarm = CfnGuardian::Models::AmazonMQBrokerAlarm.new(@resource)
-      alarm.name = 'CpuCreditBalanceCritical'
+      alarm.name = 'CpuCreditBalanceWarning'
       alarm.metric_name = 'CpuCreditBalance'
       alarm.comparison_operator = 'LessThanThreshold'
       alarm.statistic = 'Minimum'

data/lib/cfnguardian/resources/apigateway.rb

@@ -26,6 +26,7 @@ module CfnGuardian::Resource
       alarm.statistic = 'Average'
       alarm.threshold = 1000
       alarm.evaluation_periods = 2
+      alarm.treat_missing_data = 'notBreaching'
       @alarms.push(alarm)
     end
     

data/lib/cfnguardian/resources/base.rb

@@ -26,6 +26,9 @@ module CfnGuardian::Resource
     end
     
     def get_alarms(group,overides={})
+      # deep copying the overrides to preserse it's reference before doing any changes to it
+      overides = Marshal.load(Marshal.dump(overides))
+
       # generate default alarms
       default_alarms()
 

data/lib/cfnguardian/resources/jenkins.rb

@@ -0,0 +1,17 @@
+module CfnGuardian::Resource
+    class Jenkins < Base
+
+        def default_alarms
+            alarm = CfnGuardian::Models::JenkinsAlarm.new(@resource)
+            alarm.name = 'NoSuccess'
+            alarm.metric_name = 'Success'
+            alarm.statistic = 'Maximum'
+            alarm.treat_missing_data = 'breaching'
+            alarm.alarm_action = 'Warning'
+            alarm.period = 3600
+            alarm.comparison_operator = 'LessThanThreshold'
+            alarm.threshold = 1
+            @alarms.push(alarm)
+        end
+    end
+end

data/lib/cfnguardian/resources/lambda.rb

@@ -6,24 +6,28 @@ module CfnGuardian::Resource
       alarm.name = 'LambdaErrors'
       alarm.metric_name = 'Errors'
       alarm.threshold = 0.5
+      alarm.treat_missing_data = 'notBreaching'
       @alarms.push(alarm)
       
       alarm = CfnGuardian::Models::LambdaAlarm.new(@resource)
       alarm.name = 'Throttles'
       alarm.metric_name = 'Throttles'
       alarm.threshold = 0.5
+      alarm.treat_missing_data = 'notBreaching'
       @alarms.push(alarm)
       
       alarm = CfnGuardian::Models::LambdaAlarm.new(@resource)
       alarm.name = 'DeadLetterErrors'
       alarm.metric_name = 'DeadLetterErrors'
       alarm.threshold = 0.5
+      alarm.treat_missing_data = 'notBreaching'
       @alarms.push(alarm)
       
       alarm = CfnGuardian::Models::LambdaAlarm.new(@resource)
       alarm.name = 'IteratorAge'
       alarm.metric_name = 'IteratorAge'
       alarm.threshold = 600000
+      alarm.treat_missing_data = 'notBreaching'
       @alarms.push(alarm)
       
       alarm = CfnGuardian::Models::LambdaAlarm.new(@resource)
@@ -31,6 +35,7 @@ module CfnGuardian::Resource
       alarm.metric_name = 'Duration'
       alarm.statistic = 'Average'
       alarm.threshold = 30
+      alarm.treat_missing_data = 'notBreaching'
       @alarms.push(alarm)
     end
     

data/lib/cfnguardian/version.rb

@@ -1,4 +1,4 @@
 module CfnGuardian
-  VERSION = "0.7.1"
+  VERSION = "0.7.5"
   CHANGE_SET_VERSION = VERSION.gsub('.', '-').freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: cfn-guardian
 version: !ruby/object:Gem::Version
-  version: 0.7.1
+  version: 0.7.5
 platform: ruby
 authors:
 - Guslington
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2021-09-07 00:00:00.000000000 Z
+date: 2021-11-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: thor
@@ -295,6 +295,7 @@ files:
 - lib/cfnguardian/resources/internal_http.rb
 - lib/cfnguardian/resources/internal_port.rb
 - lib/cfnguardian/resources/internal_sftp.rb
+- lib/cfnguardian/resources/jenkins.rb
 - lib/cfnguardian/resources/lambda.rb
 - lib/cfnguardian/resources/log_group.rb
 - lib/cfnguardian/resources/network_targetgroup.rb