Ajinkya aws dynamodb prevention #124

ajinkya1986 · 2024-07-29T12:28:02Z

No description provided.

docs/aws/audit/dynamodbmonitoring/rules/dax_cluster_encrypted.mdx

mpurusottamc · 2024-07-29T12:28:43Z

docs/aws/audit/dynamodbmonitoring/rules/dax_cluster_encrypted_remediation.mdx

+   # Initialize a session using Amazon DynamoDB
+   session = boto3.Session(
+       aws_access_key_id='YOUR_ACCESS_KEY',
+       aws_secret_access_key='YOUR_SECRET_KEY',


Secret: Secret Keyword

Click here for more details

docs/aws/audit/dynamodbmonitoring/rules/dax_cluster_encrypted_remediation.mdx

docs/aws/audit/dynamodbmonitoring/rules/ddb_customer_kms_key.mdx

docs/aws/audit/dynamodbmonitoring/rules/ddb_customer_kms_key_remediation.mdx

mpurusottamc · 2024-07-29T12:28:52Z

docs/aws/audit/dynamodbmonitoring/rules/ddb_customer_kms_key_remediation.mdx

+
+session = boto3.Session(
+    aws_access_key_id='YOUR_ACCESS_KEY',
+    aws_secret_access_key='YOUR_SECRET_KEY',


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-07-29T12:28:53Z

docs/aws/audit/dynamodbmonitoring/rules/ddb_table_autoscaling_enabled.mdx

+               'AttributeName': 'PrimaryKey',
+               'AttributeType': 'S'
+           }
+       ],


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-07-29T12:28:55Z

docs/aws/audit/dynamodbmonitoring/rules/ddb_table_autoscaling_enabled.mdx

+```
+
+4. The above script will print out the names of all DynamoDB tables that do not have autoscaling enabled. If no output is produced, that means all tables have autoscaling enabled. If there is an error while checking a table, the error message will be printed.
+</Accordion>


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-07-29T12:28:57Z

docs/aws/audit/dynamodbmonitoring/rules/ddb_table_autoscaling_enabled_remediation.mdx

+   # Initialize a session using Amazon DynamoDB
+   session = boto3.Session(
+       aws_access_key_id='YOUR_ACCESS_KEY',
+       aws_secret_access_key='YOUR_SECRET_KEY',


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-07-29T12:28:59Z

docs/aws/audit/dynamodbmonitoring/rules/ddb_table_autoscaling_enabled_remediation.mdx

+
+session = boto3.Session(
+    aws_access_key_id='YOUR_ACCESS_KEY',
+    aws_secret_access_key='YOUR_SECRET_KEY',


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-07-29T12:29:01Z

docs/aws/audit/dynamodbmonitoring/rules/ddb_table_backup_enabled.mdx

+       except Exception as e:
+           print(f"Error enabling continuous backups for table {table}: {e}")
+   ```
+


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-07-29T12:29:03Z

docs/aws/audit/dynamodbmonitoring/rules/ddb_table_backup_enabled.mdx

+            print(f"Continuous backup is NOT enabled for {table.name}")
+    else:
+        print(f"Continuous backup is NOT enabled for {table.name}")
+```


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-07-29T12:29:04Z

docs/aws/audit/dynamodbmonitoring/rules/ddb_table_backup_enabled_remediation.mdx

+   # Initialize a session using Amazon DynamoDB
+   session = boto3.Session(
+       aws_access_key_id='YOUR_ACCESS_KEY',
+       aws_secret_access_key='YOUR_SECRET_KEY',


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-07-29T12:29:06Z

docs/aws/audit/dynamodbmonitoring/rules/ddb_table_backup_enabled_remediation.mdx

+
+session = boto3.Session(
+    aws_access_key_id='YOUR_ACCESS_KEY',
+    aws_secret_access_key='YOUR_SECRET_KEY',


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-07-29T12:29:08Z

docs/aws/audit/dynamodbmonitoring/rules/firehose_delivery_stream_destination_encryption.mdx

+
+4. **Check the destination encryption**:
+   For each delivery stream, use the `describe_delivery_stream` method to get its details and check if the destination encryption is enabled.
+


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-07-29T12:29:10Z

...dit/dynamodbmonitoring/rules/firehose_delivery_stream_destination_encryption_remediation.mdx

+
+   session = boto3.Session(
+       aws_access_key_id='YOUR_ACCESS_KEY',
+       aws_secret_access_key='YOUR_SECRET_KEY',


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-07-29T12:29:12Z

docs/aws/audit/dynamodbmonitoring/rules/kinesis_stream_encrypted_with_cmk.mdx

+        else:
+            print(f"Stream {stream_name} is not encrypted with a CMK")
+    else:
+        print(f"Stream {stream_name} does not have encryption enabled")


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-07-29T12:29:13Z

docs/aws/audit/dynamodbmonitoring/rules/kinesis_stream_encrypted_with_cmk_remediation.mdx

+
+session = boto3.Session(
+    aws_access_key_id='YOUR_ACCESS_KEY',
+    aws_secret_access_key='YOUR_SECRET_KEY',


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-07-29T12:29:15Z

...ws/audit/dynamodbmonitoring/rules/sagemaker_notebook_data_encrypted_customer_master_keys.mdx

+4. Run the script. If a table is encrypted with a KMS Customer Master Key, the script will print the table name and the ARN of the key. If a table is not encrypted with a KMS Customer Master Key, the script will simply print the table name.
+
+Please replace 'YOUR_ACCESS_KEY' and 'YOUR_SECRET_KEY' with your actual AWS access key and secret key. Also, replace 'us-west-2' with the AWS region that you're using.
+</Accordion>


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-07-29T12:29:17Z

...amodbmonitoring/rules/sagemaker_notebook_data_encrypted_customer_master_keys_remediation.mdx

+
+session = boto3.Session(
+    aws_access_key_id='YOUR_ACCESS_KEY',
+    aws_secret_access_key='YOUR_SECRET_KEY',


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-07-29T12:29:19Z

docs/aws/audit/dynamodbmonitoring/rules/sagemaker_notebook_direct_internet_access.mdx

+   Please note that this is a simplified example and actual policy parsing might be more complex depending on the policy structure.
+</Accordion>
+
+</AccordionGroup>


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-07-29T12:29:21Z

docs/aws/audit/dynamodbmonitoring/rules/sagemaker_notebook_direct_internet_access.mdx

+</Accordion>
+
+</AccordionGroup>
+</Tab>


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-07-29T12:29:23Z

...aws/audit/dynamodbmonitoring/rules/sagemaker_notebook_direct_internet_access_remediation.mdx

+2. **Create a DynamoDB resource and client:**
+   You can create a DynamoDB resource and client using your AWS credentials. Replace 'your_access_key', 'your_secret_key', and 'your_region' with your actual AWS credentials.
+   ```python
+   dynamodb = boto3.resource('dynamodb', aws_access_key_id='your_access_key', aws_secret_access_key='your_secret_key', region_name='your_region')


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-07-29T12:29:24Z

...aws/audit/dynamodbmonitoring/rules/sagemaker_notebook_direct_internet_access_remediation.mdx

+   You can create a DynamoDB resource and client using your AWS credentials. Replace 'your_access_key', 'your_secret_key', and 'your_region' with your actual AWS credentials.
+   ```python
+   dynamodb = boto3.resource('dynamodb', aws_access_key_id='your_access_key', aws_secret_access_key='your_secret_key', region_name='your_region')
+   client = boto3.client('dynamodb', aws_access_key_id='your_access_key', aws_secret_access_key='your_secret_key', region_name='your_region')


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-07-29T12:29:26Z

docs/aws/audit/dynamodbmonitoring/rules/sagemaker_notebook_instance_vpc.mdx

+   ```python
+   import boto3
+
+   client = boto3.client('sagemaker')


Secret: Secret Keyword

Click here for more details

mpurusottamc · 2024-07-29T12:29:28Z

docs/aws/audit/dynamodbmonitoring/rules/sagemaker_notebook_instance_vpc_remediation.mdx

+   Then, configure your AWS credentials. You can do this by setting the following environment variables:
+   ```
+   AWS_ACCESS_KEY_ID = 'your_access_key'
+   AWS_SECRET_ACCESS_KEY = 'your_secret_key'


Secret: Secret Keyword

Click here for more details

ajinkyajawalkar added 2 commits May 7, 2024 18:59

Added cause for dynamodb

9c74d0b

Added prevention for dynamodb

1223004

ajinkya1986 requested a review from mpurusottamc July 29, 2024 12:28

mpurusottamc reviewed Jul 29, 2024

View reviewed changes

docs/aws/audit/dynamodbmonitoring/rules/dax_cluster_encrypted.mdx Show resolved Hide resolved

mpurusottamc reviewed Jul 29, 2024

View reviewed changes

docs/aws/audit/dynamodbmonitoring/rules/dax_cluster_encrypted.mdx Show resolved Hide resolved

mpurusottamc reviewed Jul 29, 2024

View reviewed changes

docs/aws/audit/dynamodbmonitoring/rules/dax_cluster_encrypted_remediation.mdx Show resolved Hide resolved

mpurusottamc reviewed Jul 29, 2024

View reviewed changes

docs/aws/audit/dynamodbmonitoring/rules/ddb_customer_kms_key.mdx Show resolved Hide resolved

mpurusottamc reviewed Jul 29, 2024

View reviewed changes

docs/aws/audit/dynamodbmonitoring/rules/ddb_customer_kms_key.mdx Show resolved Hide resolved

mpurusottamc reviewed Jul 29, 2024

View reviewed changes

docs/aws/audit/dynamodbmonitoring/rules/ddb_customer_kms_key_remediation.mdx Show resolved Hide resolved

mpurusottamc reviewed Jul 29, 2024

View reviewed changes


		4. Check the destination encryption:
		For each delivery stream, use the `describe_delivery_stream` method to get its details and check if the destination encryption is enabled.

Ajinkya aws dynamodb prevention #124

Are you sure you want to change the base?

Ajinkya aws dynamodb prevention #124

Uh oh!

Conversation

ajinkya1986 commented Jul 29, 2024

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants