Contents

# frozen_string_literal: true

#
# Collect GuardDuty resources
#
class GuardDuty < Mapper
  #
  # Returns an array of resources.
  #
  def collect
    resources = []

    #
    # list_detectors
    #
    @client.list_detectors.each_with_index do |response, page|
      log(response.context.operation_name, page)

      response.detector_ids.each do |detector|
        log(response.context.operation_name, 'get_detector', detector)

        # get_detector
        struct = OpenStruct.new(@client.get_detector({ detector_id: detector }).to_h)
        struct.type = 'detector'
        struct.arn = "arn:aws:guardduty:#{@region}:detector/#{detector}"

        # get_findings_statistics (only active findings)
        struct.findings_statistics = @client.get_findings_statistics({
                                                                       detector_id: detector,
                                                                       finding_statistic_types: ['COUNT_BY_SEVERITY'],
                                                                       finding_criteria: {
                                                                         criterion: {
                                                                           'service.archived': {
                                                                             eq: ['false']
                                                                           }
                                                                         }
                                                                       }
                                                                     }).finding_statistics.to_h

        # get_master_account
        struct.master_account = @client.get_master_account({ detector_id: detector }).master.to_h

        resources.push(struct.to_h)
      end
    end

    resources
  end
end

Version data entries

6 entries across 6 versions & 1 rubygems

Version	Path
aws_recon-0.2.33	lib/aws_recon/collectors/guardduty.rb
aws_recon-0.2.32	lib/aws_recon/collectors/guardduty.rb
aws_recon-0.2.31	lib/aws_recon/collectors/guardduty.rb
aws_recon-0.2.30	lib/aws_recon/collectors/guardduty.rb
aws_recon-0.2.29	lib/aws_recon/collectors/guardduty.rb
aws_recon-0.2.28	lib/aws_recon/collectors/guardduty.rb