cfn-guardian 0.10.1 → 0.10.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 203da49bddb11c86628d0113f2e47edef4daa59daf98ddcf6812a3f3a287e911
-  data.tar.gz: f77bc9fb9a10a8ea2fbbf068052ae270c0d5037cc014c5335cf8f596ebe13849
+  metadata.gz: 19ef61efb4a240960a8ad0818184f1cdea82dc186ab48a7ed7c645b7b2f57a69
+  data.tar.gz: d2d6c30ea763f40b3ee726738a9c8b63a96b7844a01b0ec68aacd684f4f9f906
 SHA512:
-  metadata.gz: 4c19505294da9243d2cd4147541385ebbdc25d39827be6bad4bb507e468cf372685f6b1ae2bcf228442a8dadd6801d7f8b6dd5f821d9227dff193893fc0eb735
-  data.tar.gz: f69237b0bbbf3356a58a1f49895cf26c21abbeae137937f5b68844442b1b5a1261a2219deaf018804bfae4a83aea31ef71ad2badbd6aeed4b2d70610d0a2390b
+  metadata.gz: aba8ad3df1ba1491b4fb66532775c3383e094c6eddb957eb5fbaeab891f7624bd48547c88f247c2e089cadb91dd4ea441941bb96609d4e8879a67f1e76e0e8c5
+  data.tar.gz: 4a5bf9ea7c2649b143c881499ab5af42781703f7855d118433dc11aabef5ac6ed2905e61466b78373194a3d3282307f7d2578ae587cee5a430f560215caaa4d4

data/.github/workflows/build-gem.yml

@@ -11,15 +11,19 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v2
-    - name: set up ruby 2.7
-      uses: actions/setup-ruby@v1
+    - name: Check out the repo
+      uses: actions/checkout@v3
+    
+    - name: Set up ruby 2.7
+      uses: ruby/setup-ruby@v1
       with:
-        ruby-version: 2.7.x
+        ruby-version: 2.7
+
     - name: rspec
       run: |
         gem install rspec
         rspec
+
     - name: build gem
       run: |
         gem build cfn-guardian.gemspec

data/.github/workflows/push.yml

@@ -12,7 +12,7 @@ jobs:
 
     steps:
     - name: Check out the repo
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
 
     - name: Inject slug/short variables
       uses: rlespinasse/github-slug-action@v3.x  

data/.github/workflows/release-gem.yml

@@ -11,12 +11,12 @@ jobs:
 
     steps:
     - name: Check out the repo
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
     
     - name: Set up ruby 2.7
-      uses: actions/setup-ruby@v1
+      uses: ruby/setup-ruby@v1
       with:
-        ruby-version: 2.7.x
+        ruby-version: 2.7
     
     - name: Publish gem
       uses: dawidd6/action-publish-gem@v1

data/.github/workflows/release-image.yml

@@ -11,7 +11,7 @@ jobs:
 
     steps:
     - name: Check out the repo
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
 
     - name: Set up Docker Buildx
       uses: docker/setup-buildx-action@v1

data/docs/custom_checks/ecs_container_instance_check.md

@@ -13,6 +13,6 @@ Resources:
 Templates:
   ECSCluster:
     # override the alarm defaults
-    ECSContianerInstancesDisconnected:
+    ECSContainerInstancesDisconnected:
       ...
 ```

data/lib/cfnguardian/models/check.rb

@@ -163,9 +163,9 @@ module CfnGuardian
         super(resource)
         @group = 'ContainerInstance'
         @name = 'ContainerInstanceCheck'
-        @package = 'ecs-containder-instance-check'
+        @package = 'ecs-container-instance-check'
         @handler = 'handler.run_check'
-        @version = '4f650d5846d6e8d19f0139bccdeeb147f03f0dd6'
+        @version = '387446fbe2eb18fb4f75462c27cc07caad4a26b8'
         @runtime = 'python3.7'
       end
     end

data/lib/cfnguardian/resources/ecs_cluster.rb

@@ -23,8 +23,8 @@ module CfnGuardian::Resource
       
       alarm = CfnGuardian::Models::ECSClusterAlarm.new(@resource)
       alarm.namespace = 'EcsCICheck'
-      alarm.name = 'ECSContianerInstancesDisconnected'
-      alarm.metric_name = 'ECSContianerInstancesDisconnected'
+      alarm.name = 'ECSContainerInstancesDisconnected'
+      alarm.metric_name = 'ECSContainerInstancesDisconnected'
       alarm.alarm_action = 'Critical'
       alarm.threshold = 0
       alarm.period = 300

data/lib/cfnguardian/resources/elastic_search.rb

@@ -20,6 +20,7 @@ module CfnGuardian::Resource
         alarm.evaluation_periods = 5
         alarm.datapoints_to_alarm = 3
         alarm.alarm_action = 'Warning'
+        alarm.enabled = false
         @alarms.push(alarm)
 
         alarm = CfnGuardian::Models::ElasticSearchAlarm.new(@resource)
@@ -28,6 +29,7 @@ module CfnGuardian::Resource
         alarm.threshold = 92
         alarm.evaluation_periods = 5
         alarm.alarm_action = 'Critical'
+        alarm.enabled = false
         @alarms.push(alarm)
 
         alarm = CfnGuardian::Models::ElasticSearchAlarm.new(@resource)

data/lib/cfnguardian/resources/lambda.rb

@@ -6,18 +6,24 @@ module CfnGuardian::Resource
       alarm.name = 'LambdaErrors'
       alarm.metric_name = 'Errors'
       alarm.threshold = 0.5
+      alarm.evaluation_periods = 1
+      alarm.datapoints_to_alarm = 1
       @alarms.push(alarm)
       
       alarm = CfnGuardian::Models::LambdaAlarm.new(@resource)
       alarm.name = 'Throttles'
       alarm.metric_name = 'Throttles'
       alarm.threshold = 0.5
+      alarm.evaluation_periods = 1
+      alarm.datapoints_to_alarm = 1
       @alarms.push(alarm)
       
       alarm = CfnGuardian::Models::LambdaAlarm.new(@resource)
       alarm.name = 'DeadLetterErrors'
       alarm.metric_name = 'DeadLetterErrors'
       alarm.threshold = 0.5
+      alarm.evaluation_periods = 1
+      alarm.datapoints_to_alarm = 1
       @alarms.push(alarm)
       
       alarm = CfnGuardian::Models::LambdaAlarm.new(@resource)

data/lib/cfnguardian/stacks/main.rb

@@ -81,6 +81,17 @@ module CfnGuardian
             }]
           }
         }
+        policies << {
+          PolicyName: 'container-instance-check',
+          PolicyDocument: {
+            Version: '2012-10-17',
+            Statement: [{
+              Effect: 'Allow',
+              Action: [ 'ecs:ListContainerInstances' ],
+              Resource: '*'
+            }]
+          }
+        }
         if ssm_parameters.any?
           policies << {
             PolicyName: 'ssm-parameters',

data/lib/cfnguardian/version.rb

@@ -1,4 +1,4 @@
 module CfnGuardian
-  VERSION = "0.10.1"
+  VERSION = "0.10.4"
   CHANGE_SET_VERSION = VERSION.gsub('.', '-').freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: cfn-guardian
 version: !ruby/object:Gem::Version
-  version: 0.10.1
+  version: 0.10.4
 platform: ruby
 authors:
 - Guslington
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2022-11-13 00:00:00.000000000 Z
+date: 2023-01-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: thor