Demonstrates sending Amazon GuardDuty findings to your Slack Channel
You must have your own slack account
Create an incoming webhook in slack
Use the CloudFormation service to execute the gd2slack.template in this repository
To test the template be sure that you have GuardDuty enabled in the same region. You can then generate some sample findings. In a few minutes, you should see the findings showing up in your slack channel.
This project is intended to be a sample and I embedded the lambda code directly into the CloudFormation template to make it simple to do an initial deployment to any region. The downside of doing this is that the lambda function is limited to 4096 characters and its node.js embedded in JSON which is difficult to work with. If you want to extend the sample, I'd recommend that you package up the lambda code in your own S3 bucket. You would then just replace the ZipFile parameter in the CloudFormation to the S3Bucket and S3Key of your lambda function.
This sample code is made available under the MIT-0 license. See the LICENSE file.