Analyzer should pull bucket from event, not environment variables
See original GitHub issueBackground
Right now, the analyzer uses os.environ['S3_BUCKET_NAME']
to determine which bucket to download binaries from. The problem with this approach is that the analyzer can never be invoked for any other bucket. If the bucket name were pulled from the event notification instead of an environment variable, the analyzer could be invoked directly for any S3 object.
In particular, this would make it easy for users to manually add event notifications for their existing S3 buckets.
Desired Change
Use the bucket name from the event notification instead of an environment variable.
Issue Analytics
- State:
- Created 6 years ago
- Reactions:1
- Comments:6
Top Results From Across the Web
Troubleshoot issues when passing environment variables to ...
I want to troubleshoot issues when passing environment variables to my Amazon Elastic Container Service (Amazon ECS) task.
Read more >Use environment variables | Cloud Run Documentation
When you set environment variables, they are injected into the container and are accessible to your code. Environment variables are set as key/value...
Read more >Environment variables - GitLab Docs
GitLab exposes certain environment variables which can be used to override their defaults values. ... Enabled by default for non-production environments.
Read more >motdotla/dotenv: Loads environment variables from .env for ...
By doing this, you do not need to require and load dotenv in your application code. $ node -r dotenv/config your_script.js. The ...
Read more >Set a Bitbucket Repository Environment Variable
Set a Bitbucket Repository Environment Variable. Software Composition Analysis. Publication: Software Composition Analysis; Edition date: 2022-12-16 ...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
The documentation should be updated with instructions on how to use BinaryAlert to analyze existing S3 buckets
Each lambda function needs its own policies to interact with the various AWS resources, and those policies are all defined in
terraform/lambda_iam.tf
, which are attached to the Lambda execution role