search

trendmicro / cloudone-filestorage-plugins

Trend Micro Cloud One File Storage Security plugins reference code.
https://cloudone.trendmicro.com
Apache License 2.0
42 stars 51 forks source link

!!! emergency !!! not supported KMS on S3 #144

Closed jawahiko closed 11 months ago

jawahiko commented 1 year ago

Discussed in https://github.com/trendmicro/cloudone-filestorage-plugins/discussions/143

Originally posted by **jawahiko** August 4, 2023 表題の通りです。 KMS設定されたS3には隔離機能が働きません。。。DEVでは動作していたのに本番では動作しなくて困っていたところ、KMS暗号化がかかったS3では動作しないLambda関数になっていたことが発覚しました。。 python修正を試みてますが出来ず。。。急ぎ対応をお願いしたく。。 As the title says. Quarantine function does not work for S3 with KMS settings. . . It worked in DEV, but when I was in trouble because it didn't work in production, I discovered that the Lambda function didn't work in S3 with KMS encryption. . I'm trying to fix python, but I can't. . . I would like to ask for your urgent response. .
trend-jack-c-tang commented 1 year ago

Hi @jawahiko , This requires additional actions to allow the quarantine and promote lambda execution role to use the key. Please see https://github.com/trendmicro/cloudone-filestorage-plugins/issues/85 for reference.

felipecosta09 commented 1 year ago

@jawahiko, look at the PR #139 it should fix your issue as soon is merged.

trend-jack-c-tang commented 11 months ago

It's supported now.