Can we managed AWS Inspector suppression rules as code ? (terraform, api calls?)

0

Hello everyone ! I've been researching the AWS DOC, the Terraform doc, tried Googling it, I can't find a way to manage the AWS Inspector suppression rules from elsewhere than the UI. I'm kinda surprised. Maybe it has a different name ?

When you have multiple environments, and different owner of different products, managing it from the UI makes no sense. Any hints ?

Thanks !

JM
gefragt vor einem Jahr465 Aufrufe
3 Antworten
0
Akzeptierte Antwort

In API/CLI, Suppression Rules are called Filters. You can list, create, update and delete suppression rules.

AWS
beantwortet vor einem Jahr
profile picture
EXPERTE
überprüft vor 2 Monaten
  • Oh I see @benoit, in the create-filters, there is indeed the --action SUPPRESS!

    Okay interesting. It's not implemented yet in the Terraform Provider, but maybe I can work around this.

    Thanks for the reply !

0

I am looking for a solution to manage Insecptor suppression rules by Terraform However I can't find it Is there any solution for this one? Thanks

Son
beantwortet vor 7 Monaten
-1

https://docs.aws.amazon.com/inspector/latest/user/findings-managing-supression-rules.html Correct this is troubling @JM. If you are an enterprise customer I HIGHLY suggest you submit a PFR to get this ball rolling. I checked to see if there was a means to do this via CLI and alas there wasn't. While this isn't an "Answer" I think you have validated your concern. Snapshot of leave feedback

Your feedback means a lot to us to help drive the service to be better for you. If this was acceptable as an answer please don't fret from marking it such. I know I will make this known to the service team internally.

profile picture
D G
beantwortet vor einem Jahr
  • Alright well thanks for confirming my suspicion ! Sad to hear cause this makes AWS Inspector hard to use for container findings. Happy to hear that my question might trigger some initiatives on your end though. Good evening !

  • Very valid point @Benoit de Chateauvieux I was checking inspector1 not 2. To the OP I believe these comments provide you next steps to move forward.

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen