Can JupiterOne determine which assets are protected with AWS Shield Advance?

dcpeach
dcpeach ✭✭✭✭✭
in Asset Management
Our organization just launched Shield Advance with Remediation.

Answers

  • Scooper1920
    Scooper1920 ✭
    Prior to protecting your resources, you can establish Firewall Management Service Advanced Policies using the following JupiterOne query.
    FIND UNIQUE aws_fms_policy WITH policyName ~= 'ShieldAdvanced' AND remediationEnabled = true AS sa
RETURN
sa.displayName AS ' LB Policy Name', sa.policyArn AS 'Policy Arn', sa.policyId AS 'Policy ID', sa.accountId AS 'Account ID',
sa.securityServiceType AS 'Security Service Type',  sa._createdOn AS 'CreatedOn', sa.region AS Region

This Month's Leaders

Categories