/terraform-aws-guardduty-teams

A Microsoft Teams alerting system for AWS GuardDuty findings, easily deployable via Terraform.

Primary LanguageHCLISC LicenseISC

Terraform AWS GuardDuty Teams

This project allows you to deploy a simple Microsoft Teams alerting system for AWS GuardDuty findings. When findings are updated, a CloudWatch rule is used to trigger a lambda function which formats and sends the messages.

Written for my blog post: Integrating AWS GuardDuty with Microsoft Teams.

Requirements

  • Terraform >= 0.14
  • AWS CLI

Getting Started

  1. Clone this repository locally.
  2. Run terraform --version and ensure you have at least version 0.14 installed.
  3. Check that you have a set of credentials configured for the AWS CLI. Note down the name of the relevant profile.
  4. Copy terraform/terraform.tfvars.example to terraform/terraform.tfvars and modify the parameters to suit your needs (including the profile name from step 3).
  5. Change directory to terraform and run the following commands:
terraform init
terraform apply
  1. After deployment, notifications for updated findings should begin appearing immediately.

License

The code in this repository is distributed under the terms of the ISC license.