Baza-86 / stale-securitygroup-rule-analysis-with-serverless-architecture

MIT No Attribution
0 stars 0 forks source link

Implement ttl on Analysis DDB #129

Closed Baza-86 closed 5 months ago

Baza-86 commented 7 months ago

This PR implements a TTL value on the analysis records written to the analysis table. This creates a ttl on any new records with 60 day ttl, and updates any records with a new ttl of +60 days. The table has been update to support removal of records based on the ttl attribute.

To update old records that are no longer being updated (and thus would never receive a ttl value), the ddb_expire lambda function and step function ingest a list of records from a CSV store in S3 that then have a 30 day ttl added to the record in the analysis table.

Baza-86 commented 5 months ago

All records now updated with a TTL. Merging into release branch.