matthew-harper

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:ListBucket"
            ],
            "Resource": [
                "arn:aws:s3:::my-release-artifacts"

matthew-harper

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:GetObject"
            ],
            "Resource": "arn:aws:s3:::my-release-artifacts/*"
        }

matthew-harper

SELECT distinct "province/state"
FROM "sample-db"."medium_covid_data"
WHERE year = '2020' and month = '1' and deaths > 0 ORDER BY "province/state";

matthew-harper

git clone https://github.com/CSSEGISandData/COVID-19.git

matthew-harper

def filter_user_events(event) -> bool:
    is_match = match_user_agent(event['userAgent'])
    is_read_only = match_readonly_event_name(event['eventName'])
    is_ignored_event = match_ignored_events(event['eventName'])
    is_in_event = 'invokedBy' in event['userIdentity'] and event['userIdentity']['invokedBy'] == 'AWS Internal'

    status = is_match and not is_read_only and not is_ignored_event and not is_in_event

    return status

matthew-harper

import json
import urllib.parse
import boto3
import io
import gzip
import re

s3 = boto3.client('s3')
sns = boto3.client('sns')
sns_arn = "arn:replace_me"

matthew-harper

def post_to_sns(user, event) -> None:
    message = f'Manual AWS Changed Detected:  {user} --> {event}'
    sns_publish(message)


def post_to_sns_details(message) -> None:
    message = {"Manual AWS Change Detected": message}
    sns_publish(message)

matthew-harper

def filter_user_events(event) -> bool:
    is_match = match_user_agent(event['userAgent'])
    is_read_only = match_readonly_event_name(event['eventName'])
    is_ignored_event = match_ignored_events(event['eventName'])
    is_in_event = 'invokedBy' in event['userIdentity'] and event['userIdentity']['invokedBy'] == 'AWS Internal'

    status = is_match and not is_read_only and not is_ignored_event and not is_in_event

    return status

matthew-harper

output_dict = [record for record in event_json['Records'] if filter_user_events(record)]

matthew-harper

{
  "Records": [
    {
      "eventVersion": "1.05",
      "userIdentity": {
        "type": "AssumedRole",
        "principalId": "AROAISWA7TXBQT4XOO2X6:[email protected]",
        "arn": "arn:aws:sts::1234:assumed-role/[email protected]",
        "accountId": "1234",
        "accessKeyId": "ASIAZVE7HIYF3KVNS46V",