aws-samples / amazon-guardduty-multiaccount-scripts

This script automates the process of running the GuardDuty multi-account workflow across a group of accounts that are in your control
Apache License 2.0
130 stars 71 forks source link

Enable Guard Duty on Stolkhome region #28

Closed dasbiswajit closed 5 years ago

dasbiswajit commented 5 years ago

Hello Team We are enabling Guard duty using enableguardduty.py via switch role. But we can see it is not working properly.for Stolkholm region it is not working. Can you please confirm? But it is enabling all other region.

We are executing the following command to enabling Guard duty - python amazon-guardduty-multiaccount-scripts/enableguardduty.py --master_account <master ac no> --assume_role <guard_duty_assume_role> <guardduty_fileName>

guardduty_fileName contents - AccountxNoxxxxxxxxxxxxxx,account_root_email

ryanholland commented 5 years ago

This is most likely due to an outdated version of boto, the script uses the get_available_regions() function to get the list of supported regions. This is not an API call but rather reads a local json file that ships with boto, if you do not have the most up-to-date version of boto then the script will not be aware that the eu-north-1 region is now supported.

dasbiswajit commented 5 years ago

We are using the following boto version:

aws-cli/1.16.83 Python/2.7.5 Linux/3.10.0-862.6.3.el7.x86_64 botocore/1.12.73

jimsmith commented 5 years ago

For what its worth your awscli and botocore is well out of date. You'll have to update them.

dasbiswajit commented 5 years ago

Aha ok. Thanks Biswajit

On Thursday, June 20, 2019, jimsmith notifications@github.com wrote:

For what its worth your awscli and botocore is well out of date. You'll have to update them.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/aws-samples/amazon-guardduty-multiaccount-scripts/issues/28?email_source=notifications&email_token=AA5MTSS4GA5LK5CDXK2OXQ3P3O6GRA5CNFSM4HZVR4J2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGODYGDQUY#issuecomment-504117331, or mute the thread https://github.com/notifications/unsubscribe-auth/AA5MTSUHL2SWHMPSUWYF4TLP3O6GRANCNFSM4HZVR4JQ .

-- Thanks and regards Biswajit Das Ph: 07405137599

dasbiswajit commented 5 years ago

I have updated the version. Let me check.

$aws --version $aws-cli/1.16.183 Python/2.7.5 Linux/3.10.0-862.6.3.el7.x86_64 botocore/1.12.173

dasbiswajit commented 5 years ago

Thanks @jimsmith @ryanholland Its worked.