https://github.com/illumiolabs/illumio-guard-duty-shield

This repo contains the lambda function code that can leverage AWS GuardDuty findings to prevent malicious IPs and domains from accessing your AWS hosted applications by using threat intel from the GuardDuty findings and using it to complement Illumio policy rules
https://github.com/illumiolabs/illumio-guard-duty-shield

aws aws-guardduty aws-lambda illumiolabs

Last synced: 5 months ago
JSON representation

This repo contains the lambda function code that can leverage AWS GuardDuty findings to prevent malicious IPs and domains from accessing your AWS hosted applications by using threat intel from the GuardDuty findings and using it to complement Illumio policy rules

• Host: GitHub
• URL: https://github.com/illumiolabs/illumio-guard-duty-shield
• Owner: illumiolabs
• License: apache-2.0
• Created: 2019-08-29T05:46:53.000Z (almost 7 years ago)
• Default Branch: master
• Last Pushed: 2022-01-14T22:36:40.000Z (over 4 years ago)
• Last Synced: 2025-04-14T18:48:12.261Z (over 1 year ago)
• Topics: aws, aws-guardduty, aws-lambda, illumiolabs
• Language: Python
• Size: 391 KB
• Stars: 4
• Watchers: 6
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE
  • Security: security.md

Awesome Lists containing this project

README

          
# Illumio Guard Duty Shield

[![Slack](images/slack.svg)](http://slack.illumiolabs.com)

[![License](images/license.svg)](LICENSE)

**Project Description**

This repo provides an AWS Lambda Function designed to monitor

AWS GuardDuty for malicious IPs, and import them into an Illumio PCE IP list.

This allows Illumio customers to prevent malicious IPs and domains from accessing

AWS-hosted applications by using threat intel from GuardDuty findings to

complement Illumio policy rules.

**Project Technology stack**

The application is written for Python 3 and tested up to v3.9; it is designed to be run as an AWS Lambda function as a container or loaded into the Python runtime.

For more details on packaging Lambda functions please visit https://docs.aws.amazon.com/lambda/latest/dg/lambda-functions.html

**Project workflow**

![](images/guard-duty-workflow.jpg)

## Installation

Detailed instructions on how to deploy the Lambda Function are located

in the [INSTALL](INSTALL.md) document.

## Support

The AWS Lambda Function is released and distributed as open source software subject to the

[LICENSE](LICENSE). Illumio has no obligation or responsibility related to the AWS Lambda

Function with respect to support, maintenance, availability, security or otherwise. Please

read the entire [LICENSE](LICENSE) for additional information regarding the permissions and

limitations. You can engage with the author & contributors team and community on SLACK.

## Help or Docs

You can visit us at https://labs.illumio.com

If you have questions, please use slack or email to contact us directly.

If you have issues, bug reports, etc, please file an issue in this repository's Issue Tracker.

## Contributing

Instructions on how to contribute:  [CONTRIBUTING](CONTRIBUTING.md).

## Links

 * Illumio documentation page for configuring Illumio ASP https://support.illumio.com/public/documentation/index.html