wazuh / wazuh-indexer

Wazuh indexer, the Wazuh search engine
https://opensearch.org/docs/latest/opensearch/index/
Apache License 2.0
11 stars 17 forks source link

Add Lambda function for the Amazon Security Lake integration #189

Closed AlexRuiz7 closed 5 months ago

AlexRuiz7 commented 6 months ago

Description

This PR adds extends the docker-compose environment for the Amazon Security Lake integration with a new AWS Lambda container, for local testing and development. It also adds a handler to the python module as an entry point for Lambda.

Follow the instructions to get started.

Branch is based on #186.

The Logstash pipeline fetches data every 5 minutes and uploads it to the S3. Events (documents) are stored one per line.

image

On the other hand, the AWS lambda is ready at http://localhost:9000/2015-03-31/functions/function/invocations.

curl "http://localhost:9000/2015-03-31/functions/function/invocations" -d '{"payload":"hello world!"}'
"Hello from run.py: {'payload': 'hello world!'}"

References:

Issues Resolved

Closes #146

Check List

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license. For more information on following Developer Certificate of Origin and signing off your commits, please check here.