AWS by HTTP template - hardcoded setting: 'us-east-1', 'ec2', 'ec2.amazonaws.com'

XMLWordPrintable

    • 3

      https://git.zabbix.com/projects/ZBX/repos/zabbix/browse/templates/cloud/AWS/aws_http/template_cloud_aws_http.yaml?at=release%2F7.0

      # egrep "us-east" /tmp/template_cloud_aws_http.txt
                              result = AWS.request('POST', 'us-east-1', 'ec2', 'ec2.amazonaws.com', AWS.prepareParams(payload), '', '');
                              result = AWS.request('POST', 'us-east-1', 'ec2', 'ec2.amazonaws.com', AWS.prepareParams(payload), '', '');
                              regions = AWS.getField(AWS.request('regions', 'POST', 'us-east-1', 'ec2', 'ec2.amazonaws.com', AWS.prepareParams(payload), '', ''), 'DescribeRegionsResponse.regionInfo.item');
                              result = AWS.request('POST', 'us-east-1', 'ec2', 'ec2.amazonaws.com', AWS.prepareParams(payload), '', '');
                              var result = AWS.getField(AWS.request('GET', 'us-east-1', 's3', 's3.us-east-1.amazonaws.com', AWS.prepareParams(payload), '', ''), 'ListAllMyBucketsResult.Buckets.Bucket');
      

      This causes issues, as it's possible that those addresses are not allowed to be visited by admins in network where zabbix is running.

      There should be possibility to configure region by macros, so it would not be hard coded.

            Assignee:
            Evgenii Gordymov
            Reporter:
            Oleksii Zagorskyi
            Team INT
            Votes:
            2 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: