Latest Version 1.0.4
September 17, 2021
AWS Community App
A Phantom integration that facilitates interaction with the AWS API
Built by
Compatibility
SOAR On-Prem
Platform Version: 5.5, 5.4, 5.3, 5.2, 5.1, 5.0, 4.10, 4.9, 4.8, 4.7, 4.6, 4.5, 4.2, 4.1, 4.0
Rating
0
(0)
Log in to rate this app
Support
Not Supported
Ranking
#21
in DevOps
A Phantom integration that facilitates interaction with the AWS API
Supported Actions
- test connectivity: Validate the asset configuration for connectivity using supplied configuration
- blacklist ip: Blacklist IP by adding a rule to every subnet NACL accessible by credentials
- whitelist ip: Whitelist IP by removing any block rules from NACLs
- disable acct: Disables an AWS IAM user account
- enable acct: Enables an AWS IAM user account
- remove access: Removes EC2 Access for a given IAM user
- enable access: Enable EC2 Access for a given IAM user
- remove sg access: Removes Security Group Access for a given IAM user
- enable sg access: Enable Security Group Access for a given IAM user
- remove sg ingress: Removes ingress rule from security group
- lookup instance: Return AWS EC2 instance information using IP address or Instance Id
- create instance: Creates an AWS instance from an image id
- start instance: Start EC2 instance
- stop instance: Stop EC2 instance
- snapshot instance: Snapshot AWS instance that has the given IP address
- quarantine instance: Quarantines AWS instance that has the given IP address
- asg detach instance: Detaches an instance from an auto-scaling group
- invoke lambda: Invoke an AWS Lambda function
Categories
DevOps
Created By
srv-stage-community
Source Code
GitHub(Opens new window)Type
connector
Splunk Answers
Ask a question about this app listing(Opens new window)Resources
Log in to report this app listing