Netflix/security_monkey

Every hour previously justified issues become unjustified for two iam users

Open

#946 创建于 2018年2月15日

在 GitHub 查看
 (6 评论) (0 反应) (0 负责人)Python (4,341 star) (832 fork)batch import
AWSbughelp wanted

描述

I noticed that every hour, all of the issues for two iam users in my account show back up under the "Aging Issues" dashboard. When I click in on the items, all of the past justifications that I had added for the issues are gone. I am able to add justifications again and then the issues will disappear off the "Aging Issues" dashboard until the next hour whereby my justifications will again be cleared out. For some reason, this only seems to affect two iam users in my account, other resources seem to be fine.

This is using the code on the develop branch fetched 2-14.

贡献者指南

技术栈
pythonaws
领域
securitycloudbackend
议题类型
bug
难度面向新贡献者的预计实现难度，1 表示很小改动，5 表示专家级工作。
3
预计时间有经验贡献者完成调查、实现、测试并准备 pull request 的粗略时间范围。
half day
活动状态议题当前的可参与程度：新鲜、活跃、陈旧、阻塞或等待维护者输入。
stale
清晰度议题是否清楚说明期望改动、验收标准和下一步。
mostly clear
前置要求
Python fundamentalsAWS IAM basicsBasic understanding of SQL/database
新手友好度1-100 的估计分数，表示该议题对首次贡献者的友好程度。
20
研究方向
Investigate the justification storage mechanism in security monkey. Look at the database model for Justification and IAM user issues. Check if there's a periodic job that clears justifications or if there's a bug in the justification retrieval query. The issue mentions it only affects two IAM users, so examine what's special about those users. Look at recent commits to files related to 'justification' or 'aging issues' around the time of the report (Feb 2018). Reproduce the issue by setting up the development environment with two IAM users and observe the hourly behavior.