Azure-Sentinel icon indicating copy to clipboard operation
Azure-Sentinel copied to clipboard
verified publisher icon Azure

AWS IAM playbooks

Open vu-socprime opened this issue 3 years ago • 1 comments

Changes:

  • added AWS IAM Function App connector and 3 playbooks

vu-socprime avatar Jun 24 '22 15:06 vu-socprime

Hi @vu-socprime - Can you please make below changes. Thanks in advance

  1. For all playbooks, metadata object is missing. With the new template spec (for gallery), this is mandatory. Please look at the latest guide for playbooks contribution
  2. For playbooks AWSIAM-DeleteAccessKeys, AWSIAM-EnrichIncidentWithUserInfo Can you add logic to make sure not to fail the playbook in case of AccessKeys or User not found. Similar to AWSIAM-AddTagToUser playbook

Hi @anki-narravula The playbooks were updated according to your feedback.

vu-socprime avatar Aug 10 '22 14:08 vu-socprime