Alex Smolen alsmola

Verify AWS credentials and trailtool readiness

$ trailtool status
AWS credentials: OK (account XXXXXXXXXXXX)
Ingestor stack: OK (trailtool-ingestor)
Data access: OK

Good, trailtool is ready. Let me find the break-glass session for alex@engseclabs.com.

Verify AWS credentials and trailtool readiness

$ trailtool status
AWS credentials: OK (account XXXXXXXXXXXX)
Ingestor stack: OK (trailtool-ingestor)
Data access: OK

Good, trailtool is ready. Let me check the role for denied events.

Verify AWS credentials and trailtool readiness

$ trailtool status
AWS credentials: OK (account XXXXXXXXXXXX)
Ingestor stack: OK (trailtool-ingestor)
Data access: OK

Good, trailtool is ready. Let me get the role details and generate a least-privilege policy.

Verify AWS credentials and trailtool readiness

$ trailtool status
AWS credentials: OK (account [redacted])
Ingestor stack: OK (trailtool-ingestor)
Data access: OK

Good, trailtool is ready. Let me find ClickOps resources from the last 30 days.

	{
	"Version": "2012-10-17",
	"Statement": [
	{
	"Effect": "Allow",
	"Action": [
	"signer:GetSigningProfile",
	"signer:PutSigningProfile"
	]
	"Resource": "arn:aws:signer:us-east-1:[account-number]:/signing-profiles/[signing-profile-name]"

	Resources:
	SigningProfile:
	Type: AWS::Signer::SigningProfile
	Properties:
	PlatformId: AWSLambda-SHA384-ECDSA
	CodesignedFunctionConfig:
	Type: AWS::Lambda::CodeSigningConfig
	Properties:
	Description: "GitHub Action Code Signing for Lambdas"
	AllowedPublishers:

	name: Deploy main to production

	on:
	push:
	branches: [ main ]
	pull_request:
	branches: [ main ]

	jobs:
	build:

	# CircleCI configuration to publish markdown files to Confluence

	version: 2
	jobs:
	build:
	branches:
	only:
	- master
	docker:
	- image: circleci/golang:1.13.11

	package main

	import (
	"context"
	"encoding/json"
	"fmt"
	"strings"
	"github.com/slack-go/slack"
	"github.com/aws/aws-lambda-go/events"
	"github.com/aws/aws-lambda-go/lambda"