#!/usr/bin/env python """ entry_point.py: Lambda function that terminates the EC2 Instance that was created as part of the AMI Lifecycle VULNERABILITY_SCANS State Machine. """ import datetime import json import logging import traceback import boto3 from ..services.constants_service import ConstantsService from ..services.error_notifier_service import ErrorNotifierService from ..services.security_service import SecurityService # constants OPERATOR = "VULNERABILITY_SCANS_TEAR_DOWN" TEMPLATE_FILE = "state_machine_error.template" # services error_notifier_service = ErrorNotifierService() constants_service = ConstantsService() security_service = SecurityService() # boto3 ec2_client = boto3.client('ec2') def lambda_handler(event, context): # set logging logger = logging.getLogger() logger.setLevel(logging.DEBUG) # print the event details logger.debug(json.dumps(event, indent=2)) try: # get details from previous stage vulnerability_scan_instance_id = event['vulnerability_scans_operation']['output']["vulnerability_scan_instance_id"] # terminate the ec2 instance used for testing logger.info(f"Terminating the ec2 instance used for vulnerability scans: {vulnerability_scan_instance_id}") response = ec2_client.terminate_instances( InstanceIds=[ vulnerability_scan_instance_id ] ) waiter = ec2_client.get_waiter('instance_terminated') event['vulnerability_scans_operation']['output']['status'] = constants_service.STATUS_COMPLETED event['vulnerability_scans_operation']['output']['hasError'] = False return { 'statusCode': 200, 'body': event, 'headers': {'Content-Type': 'application/json'} } except Exception as e: traceback.print_exception(type(e), value=e, tb=e.__traceback__) stack_trace = traceback.format_exc() logger.error(f'Error in executing {OPERATOR} operation: {str(e)}') event['vulnerability_scans_operation']['output']['status'] = constants_service.STATUS_ERROR event['vulnerability_scans_operation']['output']['hasError'] = True event['vulnerability_scans_operation']['output']['errorMessage'] = str(e) # create error payload to send to the api error_payload = {} error_payload['name'] = constants_service.EVENT_VULNERABILIY_SCANS error_payload['status'] = constants_service.STATUS_ERROR error_payload['status_date'] = datetime.datetime.now().strftime("%m/%d/%Y, %H:%M:%S") lifecycle_id = "NOT_DEFINED" stack_tag = "NOT_DEFINED" if 'lifecycle_id' in event: lifecycle_id = event['lifecycle_id'] if 'stack_tag' in event: lifecycle_id = event['stack_tag'] properties = { 'task': OPERATOR, "error": str(e), "stack_trace": stack_trace, "stack_tag": stack_tag, "lifecycle_id": lifecycle_id } error_payload['properties'] = properties subject = f"ERROR in {OPERATOR} state machine event for {stack_tag}" try: error_notifier_service.send_notification( subject=subject, template_name=TEMPLATE_FILE, template_attributes=error_payload, error_message=str(e), stack_trace=stack_trace ) except Exception as err: logger.error(f"An error occurred attempting to send error notification: {str(err)}") return { 'statusCode': 500, 'body': event, 'headers': {'Content-Type': 'application/json'} }