2
2
import os
3
3
from slacker import Slacker
4
4
5
-
6
5
def send_to_slack (message , attachment , channel , key ):
7
6
status = True
8
7
print ("sending slack message " + message )
@@ -57,29 +56,25 @@ def lambda_handler(event, context):
57
56
post_to_slack = True
58
57
object_field_name = ""
59
58
object_field_value = ""
60
- policy_name = event ['detail' ]['requestParameters' ]['policyArn' ].split (':' )[
61
- 5 ]
59
+ policy_name = event ['detail' ]['requestParameters' ]['policyArn' ].split (':' )[5 ]
62
60
policy_arn = event ['detail' ]['requestParameters' ]['policyArn' ]
63
61
elif event_name == "AttachGroupPolicy" or event_name == "DetachGroupPolicy" :
64
62
post_to_slack = True
65
63
object_field_name = "Group"
66
64
object_field_value = event ['detail' ]['requestParameters' ]['groupName' ]
67
- policy_name = event ['detail' ]['requestParameters' ]['policyArn' ].split (':' )[
68
- 5 ]
65
+ policy_name = event ['detail' ]['requestParameters' ]['policyArn' ].split (':' )[5 ]
69
66
policy_arn = event ['detail' ]['requestParameters' ]['policyArn' ]
70
67
elif event_name == "AttachUserPolicy" or event_name == "DetachUserPolicy" :
71
68
post_to_slack = True
72
69
object_field_name = "User"
73
70
object_field_value = event ['detail' ]['requestParameters' ]['userName' ]
74
- policy_name = event ['detail' ]['requestParameters' ]['policyArn' ].split (':' )[
75
- 5 ]
71
+ policy_name = event ['detail' ]['requestParameters' ]['policyArn' ].split (':' )[5 ]
76
72
policy_arn = event ['detail' ]['requestParameters' ]['policyArn' ]
77
73
elif event_name == "AttachRolePolicy" or event_name == "DetachRolePolicy" :
78
74
post_to_slack = True
79
75
object_field_name = "Role"
80
76
object_field_value = event ['detail' ]['requestParameters' ]['roleName' ]
81
- policy_name = event ['detail' ]['requestParameters' ]['policyArn' ].split (':' )[
82
- 5 ]
77
+ policy_name = event ['detail' ]['requestParameters' ]['policyArn' ].split (':' )[5 ]
83
78
policy_arn = event ['detail' ]['requestParameters' ]['policyArn' ]
84
79
else :
85
80
print ("No support for event " + event_name )
@@ -97,8 +92,7 @@ def lambda_handler(event, context):
97
92
operation_user = event ['detail' ]['userIdentity' ]['userName' ]
98
93
else :
99
94
# no user so must be a role
100
- operation_user = event ['detail' ]['userIdentity' ]['principalId' ].split (':' )[
101
- 1 ]
95
+ operation_user = event ['detail' ]['userIdentity' ]['principalId' ].split (':' )[1 ]
102
96
operation_role = event ['detail' ]['userIdentity' ]['sessionContext' ]['sessionIssuer' ]['userName' ]
103
97
104
98
operation_user = operation_user + \
@@ -112,21 +106,21 @@ def lambda_handler(event, context):
112
106
slack_attachment = [
113
107
{
114
108
"fallback" : "Check the IAM console for details." ,
115
- "color" : "#36a64f" ,
109
+ "color" : "#36a64f" ,
116
110
"title" : "View Policy Details in the AWS Console" ,
117
111
"title_link" : iam_policy_console_link ,
118
- "fields" : [
119
- {
120
- "title" : "Action Performed" ,
121
- "value" : event_name ,
122
- "short" : 'false'
123
- },
124
- {
125
- "title" : object_field_name ,
126
- "value" : object_field_value ,
127
- "short" : 'false'
128
- }
129
- ]
112
+ "fields" : [
113
+ {
114
+ "title" : "Action Performed" ,
115
+ "value" : event_name ,
116
+ "short" : 'false'
117
+ },
118
+ {
119
+ "title" : object_field_name ,
120
+ "value" : object_field_value ,
121
+ "short" : 'false'
122
+ }
123
+ ]
130
124
}
131
125
]
132
126
0 commit comments