AwsLambda

Veja a seguir exemplos do formato de descoberta de AWS segurança para AwsLambda recursos.

AwsLambdaFunction

O objeto AwsLambdaFunction fornece detalhes sobre a configuração de uma função do Lambda.

O exemplo a seguir mostra o AWS Security Finding Format (ASFF) do AwsLambdaFunction objeto. Para ver as descrições dos AwsLambdaFunction atributos, consulte AwsLambdaFunctionDetailsna Referência AWS Security Hub da API.

Exemplo

"AwsLambdaFunction": {
    "Architectures": [
        "x86_64"
    ],
    "Code": {
        "S3Bucket": "DOC-EXAMPLE-BUCKET",
        "S3Key": "samplekey",
        "S3ObjectVersion": "2",
        "ZipFile": "myzip.zip"
    },
    "CodeSha256": "1111111111111abcdef",
    "DeadLetterConfig": {
        "TargetArn": "arn:aws:lambda:us-east-2:123456789012:queue:myqueue:2"
    },
    "Environment": {
        "Variables": {
            "Stage": "foobar"
         },
        "Error": {
            "ErrorCode": "Sample-error-code",
            "Message": "Caller principal is a manager."
         }
     },
    "FunctionName": "CheckOut",
    "Handler": "main.py:lambda_handler",
    "KmsKeyArn": "arn:aws:kms:us-west-2:123456789012:key/mykey",
    "LastModified": "2001-09-11T09:00:00Z",
    "Layers": {
        "Arn": "arn:aws:lambda:us-east-2:123456789012:layer:my-layer:3",
        "CodeSize": 169
    },
    "PackageType": "Zip",
    "RevisionId": "23",
    "Role": "arn:aws:iam::123456789012:role/Accounting-Role",
    "Runtime": "go1.7",
    "Timeout": 15,
    "TracingConfig": {
        "Mode": "Active"
    },
    "Version": "$LATEST$",
    "VpcConfig": {
        "SecurityGroupIds": ["sg-085912345678492fb", "sg-08591234567bdgdc"],
         "SubnetIds": ["subnet-071f712345678e7c8", "subnet-07fd123456788a036"]
    },
    "MasterArn": "arn:aws:lambda:us-east-2:123456789012:\$LATEST",
    "MemorySize": 2048
}

AwsLambdaLayerVersion

O objeto AwsLambdaLayerVersion fornece detalhes sobre uma versão da camada do Lambda.

O exemplo a seguir mostra o AWS Security Finding Format (ASFF) do AwsLambdaLayerVersion objeto. Para ver as descrições dos AwsLambdaLayerVersion atributos, consulte AwsLambdaLayerVersionDetailsna Referência AWS Security Hub da API.

Exemplo

"AwsLambdaLayerVersion": {
    "Version": 2,
    "CompatibleRuntimes": [
        "java8"
    ],
    "CreatedDate": "2019-10-09T22:02:00.274+0000"
}