I recently configured the post-scan-action plugin via CLI and ran into several issues:
Was not able to create an IAM role with the instructed command. A trust policy is required so I've added this to step 4 in CLI - Create an execution role for the Lambda function.
Was not able to subscribe to an SNS topic via CLI. I was able via the AWS Console only. It seems there's an additional command required, and so I've added it under step 3 in CLI - Subscribe the Lambda to the SNS topic
I recently configured the
post-scan-action
plugin viaCLI
and ran into several issues:IAM
role with the instructed command. Atrust policy
is required so I've added this to step 4 inCLI - Create an execution role for the Lambda function
.SNS
topic viaCLI
. I was able via theAWS Console
only. It seems there's an additional command required, and so I've added it under step 3 inCLI - Subscribe the Lambda to the SNS topic