AWS GuardDuty lambda rule generation

Chad_Chamberlain — Fri, 22 Jun 2018 18:58:21 GMT

Hey all,

I'm attempting to use the GuardDuty integration that's on github here: https://github.com/PaloAltoNetworks/pan_guard_duty

I've gone through all of the steps but I get an error local and in lambda of:

python lambda_fw_config.py<test_event.json
[Lambda handler]Received event: null
Traceback (most recent call last):
File "lambda_fw_config.py", line 341, in <module>
lambda_handler(None, None)
File "lambda_fw_config.py", line 319, in lambda_handler
fw_ip = os.environ['10.0.0.6']
NameError: global name 'os' is not defined

I see that pandevice and pan-python are installed:

pip install pandevice -t .
Collecting pandevice
Collecting pan-python (from pandevice)
Installing collected packages: pan-python, pandevice
Successfully installed pan-python-0.13.0 pandevice-0.6.3
Target directory /home/xponent/code/python/pan_guard/pan already exists. Specify --upgrade to force replacement.
Target directory /home/xponent/code/python/pan_guard/pan_python-0.13.0.dist-info already exists. Specify --upgrade to force replacement.

Not sure what I'm missing, there is no os in pandevice to import. Ideas? Thanks!

Re: AWS GuardDuty lambda rule generation

Artman — Sun, 17 Feb 2019 20:10:19 GMT

Hi,

Were you able to figure out the problem? I tried changing the fw_ip etc to a value and removed the os.environ. Then, it errored out in the next function. Does anyone know if this works? I see no updates and Palo Alto will not provide any support on it.

topic Re: AWS GuardDuty lambda rule generation in VM-Series in the Public Cloud

AWS GuardDuty lambda rule generation

Re: AWS GuardDuty lambda rule generation