{"id":18876656,"url":"https://github.com/illumiolabs/illumio-security-hub-connector","last_synced_at":"2025-07-25T03:10:45.328Z","repository":{"id":50179707,"uuid":"205091414","full_name":"illumiolabs/illumio-security-hub-connector","owner":"illumiolabs","description":"This repo contains the code for Illumio security hub connector that allows customers to convert Illumio events into AWS security hub findings while enriching them with Illumio labels and EC2 metadata. It also contains the custom action AWS Lambda function to quarantine a workload","archived":false,"fork":false,"pushed_at":"2023-02-18T08:22:48.000Z","size":290,"stargazers_count":5,"open_issues_count":2,"forks_count":5,"subscribers_count":5,"default_branch":"master","last_synced_at":"2025-03-28T07:01:34.009Z","etag":null,"topics":["aws","aws-security-hub","illumiolabs","lambda-functions"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/illumiolabs.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"security-hub-quarantine-action/CHANGELOG.md","support":null}},"created_at":"2019-08-29T05:59:17.000Z","updated_at":"2023-12-05T01:39:21.000Z","dependencies_parsed_at":"2023-01-25T02:15:16.884Z","dependency_job_id":null,"html_url":"https://github.com/illumiolabs/illumio-security-hub-connector","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/illumiolabs%2Fillumio-security-hub-connector","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/illumiolabs%2Fillumio-security-hub-connector/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/illumiolabs%2Fillumio-security-hub-connector/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/illumiolabs%2Fillumio-security-hub-connector/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/illumiolabs","download_url":"https://codeload.github.com/illumiolabs/illumio-security-hub-connector/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248936656,"owners_count":21186074,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","aws-security-hub","illumiolabs","lambda-functions"],"created_at":"2024-11-08T06:14:35.649Z","updated_at":"2025-04-14T18:31:31.186Z","avatar_url":"https://github.com/illumiolabs.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Illumio \u0026 AWS Security Hub Integration\n\n[![Slack](images/slack.svg)](http://slack.illumiolabs.com)\n[![License](images/license.svg)](LICENSE)\n\n**Project Description**\n\nThis repo contains the code for Illumio security hub connector that allows customers to convert \nIllumio events into AWS security hub findings while enriching them with Illumio labels and EC2 metadata\n\n**Project Technology stack** \n\nThe security hub connector is written in python3.6 and can run in a virtual environment with python3.6\n\n**Project workflow** \n\n![Illumio \u0026 AWS Security Hub Integration](images/security-hub-connector-workflow.jpg) \u003c!-- .element height=\"20%\" width=\"20%\" --\u003e\n\n## Dependencies\n\nThe requirements for this project are recorded in requirements.txt file and need to be installed as explained\nin the Installation section below.\n\n## Installation\n\n1. Create a virtual environment with python 3.6 on a Linux machine in AWS.\nYou can use the following link to do so: https://janikarhunen.fi/how-to-install-python-3-6-1-on-centos-7\n1. Once the virtual environment is setup, install the requirements for the package using the following command in the virtual environment\n   ```\n   pip3 install -r requirements.txt\n   ```\n1. Clone this repository using the following command:\n   ```\n   git clone https://github.com/illumiolabs/illumio-security-hub-connector.git\n   ```\n1. Setup the environment variables with the Illumio PCE API configuration information using the following commands:\n   ```\n   export ILO_API_VERSION=2\n   # Replace PCE-URL with the PCE hostname in your deployment without the https\n   export ILLUMIO_SERVER=PCE-URL:8443\n   export ILO_API_KEY_ID=API-KEY-ID\n   export ILO_ORG_ID=1\n   export ILO_PORT=8443\n   export ILO_API_KEY_SECRET=API-KEY-SECRET\n   ```\n1. The API Key mentioned above can be obtained from the Illumio PCE.\n1. Also, verify that the above environment variables are visible when the following command is run inside the virtual environment, on the machine\n   ```env```\n1. Once the environment variables are set, make sure that no other credentials exist in $HOME/.illumio directory\n1. Run the following command to start the Illumio security hub connector:\n   ```\n   cd illumio-security-hub-connector/src; sh run.sh\n   ```\n1. The service will log in illumio-security-hub-connector/src/app.log file\n\n## Support\n\nThe AWS Security Hub integration code and Lambda Function for custom action is released and\ndistributed as open source software subject to the [LICENSE](LICENSE). Illumio has no obligation\nor responsibility related to the AWS Lambda Function with respect to support, maintenance,\navailability, security or otherwise. Please read the entire [LICENSE](LICENSE) for additional\ninformation regarding the permissions and limitations. You can engage with the author \u0026\ncontributors team and community on SLACK.\n\n## Help or Docs\n\nIf you have questions, please use slack for asking them.\nIf you have issues, bug reports, etc, please file an issue in this repository's Issue Tracker.\n\n## Contributing\n\nInstructions on how to contribute:  [CONTRIBUTING](CONTRIBUTING.md).\n\n## Links\n\n * Screencast demonstrating the project https://labs.illumio.com/dynamically-mitigate-potential-attacks-on-your-aws-environment\n * Illumio documentation page for configuring Illumio ASP https://support.illumio.com/public/documentation/index.html\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fillumiolabs%2Fillumio-security-hub-connector","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fillumiolabs%2Fillumio-security-hub-connector","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fillumiolabs%2Fillumio-security-hub-connector/lists"}