Can we managed AWS Inspector suppression rules as code ? (terraform, api calls?)

0

Hello everyone ! I've been researching the AWS DOC, the Terraform doc, tried Googling it, I can't find a way to manage the AWS Inspector suppression rules from elsewhere than the UI. I'm kinda surprised. Maybe it has a different name ?

When you have multiple environments, and different owner of different products, managing it from the UI makes no sense. Any hints ?

Thanks !

JM
asked a year ago442 views
3 Answers
0
Accepted Answer

In API/CLI, Suppression Rules are called Filters. You can list, create, update and delete suppression rules.

AWS
answered a year ago
profile picture
EXPERT
reviewed a month ago
  • Oh I see @benoit, in the create-filters, there is indeed the --action SUPPRESS!

    Okay interesting. It's not implemented yet in the Terraform Provider, but maybe I can work around this.

    Thanks for the reply !

0

I am looking for a solution to manage Insecptor suppression rules by Terraform However I can't find it Is there any solution for this one? Thanks

Son
answered 7 months ago
-1

https://docs.aws.amazon.com/inspector/latest/user/findings-managing-supression-rules.html Correct this is troubling @JM. If you are an enterprise customer I HIGHLY suggest you submit a PFR to get this ball rolling. I checked to see if there was a means to do this via CLI and alas there wasn't. While this isn't an "Answer" I think you have validated your concern. Snapshot of leave feedback

Your feedback means a lot to us to help drive the service to be better for you. If this was acceptable as an answer please don't fret from marking it such. I know I will make this known to the service team internally.

profile picture
D G
answered a year ago
  • Alright well thanks for confirming my suspicion ! Sad to hear cause this makes AWS Inspector hard to use for container findings. Happy to hear that my question might trigger some initiatives on your end though. Good evening !

  • Very valid point @Benoit de Chateauvieux I was checking inspector1 not 2. To the OP I believe these comments provide you next steps to move forward.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions