AWS GuardDuty lambda rule generation

[Chad_Chamberlain]

Hey all,

I'm attempting to use the GuardDuty integration that's on github here: https://github.com/PaloAltoNetworks/pan_guard_duty

I've gone through all of the steps but I get an error local and in lambda of:

python lambda_fw_config.py<test_event.json
[Lambda handler]Received event: null
Traceback (most recent call last):
  File "lambda_fw_config.py", line 341, in <module>
    lambda_handler(None, None)
  File "lambda_fw_config.py", line 319, in lambda_handler
    fw_ip = os.environ['10.0.0.6']
NameError: global name 'os' is not defined

I see that pandevice and pan-python are installed:

pip install pandevice -t .
Collecting pandevice
Collecting pan-python (from pandevice)
Installing collected packages: pan-python, pandevice
Successfully installed pan-python-0.13.0 pandevice-0.6.3
Target directory /home/xponent/code/python/pan_guard/pan already exists. Specify --upgrade to force replacement.
Target directory /home/xponent/code/python/pan_guard/pan_python-0.13.0.dist-info already exists. Specify --upgrade to force replacement.

Not sure what I'm missing, there is no os in pandevice to import.  Ideas?  Thanks!

[Artman]

Hi,

  Were you able to figure out the problem?  I tried changing the fw_ip etc to a value and removed the os.environ.  Then, it errored out in the next function.  Does anyone know if this works?  I see no updates and Palo Alto will not provide any support on it.