10 Forks
11 Stars
11 Watchers

aws-lambda-guardduty

Lambda function to be called in CloudWatch when GuardDuty sends logs to CloudWatch. This script will write the malicious IP to a dedicated file in an S3 bucket. Firewall service (i.e. FortiOS) can pull this list, and add those malicious IPs to the blacklist.

How to download and setup aws-lambda-guardduty

Open terminal and run command
git clone https://github.com/fortinet/aws-lambda-guardduty.git
git clone is used to create a copy or clone of aws-lambda-guardduty repositories. You pass git clone a repository URL.
it supports a few different network protocols and corresponding URL formats.

Also you may download zip file with aws-lambda-guardduty https://github.com/fortinet/aws-lambda-guardduty/archive/master.zip

Or simply clone aws-lambda-guardduty with SSH
[email protected]:fortinet/aws-lambda-guardduty.git

If you have some problems with aws-lambda-guardduty

You may open issue on aws-lambda-guardduty support forum (system) here: https://github.com/fortinet/aws-lambda-guardduty/issues