serverless.yml

service: guardduty-notifications

provider:
  name: aws
  runtime: go1.x
  region: ap-southeast-2

environment:
  OAUTH_ACCESS_TOKEN: ${ssm:guardBotOAuthAccessToken}
  CHANNEL: ${ssm:guardChannel}

package:
 exclude:
   - ./**
 include:
   - ./bin/**

functions:
  finding-reporter:
    handler: bin/finding-reporter
    events:
      - cloudwatchEvent:
          name: "guard-duty-findings"
          enabled: true
          event:
            source:
              - "aws.guardduty"
            detail-type:
              - "GuardDuty Finding"
            detail:
              severity:
                - 4
                - 4.0
                - 4.1
                - 4.2
                - 4.3
                - 4.4
                - 4.5
                - 4.6
                - 4.7
                - 4.8
                - 4.9
                - 5.0
                - 5.1
                - 5.2
                - 5.3
                - 5.4
                - 5.5
                - 5.6
                - 5.7
                - 5.8
                - 5.9
                - 6
                - 6.0
                - 6.1
                - 6.2
                - 6.3
                - 6.4
                - 6.5
                - 6.6
                - 6.7
                - 6.8
                - 6.9
                - 7
                - 7.0
                - 7.1
                - 7.2
                - 7.3
                - 7.4
                - 7.5
                - 7.6
                - 7.7
                - 7.8
                - 7.9
                - 8
                - 8.0
                - 8.1
                - 8.2
                - 8.3
                - 8.4
                - 8.5
                - 8.6
                - 8.7
                - 8.8
                - 8.9