How to customize ChatBot Slack message?

0

I want to publish ECR vulnerability scan results to my Slack channel. I successfully configured EventBridge rule for AWS Inspector Scan and I'm receiving the messages in Slack.

However the message looks pretty unusable:

Inspector2 Scan | eu-central-1 | Account: 123456789012
Inspector2 Scan
Related resources  
• arn:aws:ecr:eu-central-1:123456789012:repository/my-app

It doesn't show the most important information, which are the findings, e.g. from the SNS message:

{
    "version": "0",
    "id": "739c0d3c-4f02-85c7-5a88-94a9EXAMPLE",
    "detail-type": "Inspector2 Scan",
    "source": "aws.inspector2",
    "account": "123456789012",
    "time": "2021-12-03T18:03:16Z",
    "region": "us-east-2",
    "resources": [
        "arn:aws:ecr:us-east-2:123456789012:repository/amazon/amazon-ecs-sample"
    ],
    "detail": {
        "scan-status": "INITIAL_SCAN_COMPLETE",
        "repository-name": "arn:aws:ecr:us-east-2:123456789012:repository/amazon/amazon-ecs-sample",
        "finding-severity-counts": {
            "CRITICAL": 7,
            "HIGH": 61,
            "MEDIUM": 62,
            "TOTAL": 158
        },
        "image-digest": "sha256:36c7b282abd0186e01419f2e58743e1bf635808231049bbc9d77e5EXAMPLE",
        "image-tags": [
            "latest"
        ]
    }
}

Is there any way to preprocess the final Slack message to include some additional information from the SNS event?

preguntada hace un año1296 visualizaciones
2 Respuestas
0

As described in the following documentation Editing to an arbitrary message will prevent notification.

https://aws.amazon.com/chatbot/faqs/?nc1=h_ls

Notifications for Amazon EventBridge events are delivered to chat channels with their original event message content. If this message content is modified (such as by using EventBridge InputTransformers), AWS Chatbot will not be able to deliver arbitrary notifications to your chat channels.

profile picture
EXPERTO
respondido hace un año
0

Chatbot supports custom notifications with this update since 2023/09.

profile picture
Kane
respondido hace 6 meses

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas