Can we managed AWS Inspector suppression rules as code ? (terraform, api calls?)

0

Hello everyone ! I've been researching the AWS DOC, the Terraform doc, tried Googling it, I can't find a way to manage the AWS Inspector suppression rules from elsewhere than the UI. I'm kinda surprised. Maybe it has a different name ?

When you have multiple environments, and different owner of different products, managing it from the UI makes no sense. Any hints ?

Thanks !

JM
demandé il y a un an465 vues
3 réponses
0
Réponse acceptée

In API/CLI, Suppression Rules are called Filters. You can list, create, update and delete suppression rules.

AWS
répondu il y a un an
profile picture
EXPERT
vérifié il y a 2 mois
  • Oh I see @benoit, in the create-filters, there is indeed the --action SUPPRESS!

    Okay interesting. It's not implemented yet in the Terraform Provider, but maybe I can work around this.

    Thanks for the reply !

0

I am looking for a solution to manage Insecptor suppression rules by Terraform However I can't find it Is there any solution for this one? Thanks

Son
répondu il y a 7 mois
-1

https://docs.aws.amazon.com/inspector/latest/user/findings-managing-supression-rules.html Correct this is troubling @JM. If you are an enterprise customer I HIGHLY suggest you submit a PFR to get this ball rolling. I checked to see if there was a means to do this via CLI and alas there wasn't. While this isn't an "Answer" I think you have validated your concern. Snapshot of leave feedback

Your feedback means a lot to us to help drive the service to be better for you. If this was acceptable as an answer please don't fret from marking it such. I know I will make this known to the service team internally.

profile picture
D G
répondu il y a un an
  • Alright well thanks for confirming my suspicion ! Sad to hear cause this makes AWS Inspector hard to use for container findings. Happy to hear that my question might trigger some initiatives on your end though. Good evening !

  • Very valid point @Benoit de Chateauvieux I was checking inspector1 not 2. To the OP I believe these comments provide you next steps to move forward.

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions