Wait until the stack reaches the state CREATE_COMPLETEĬonfigure the buckets you want to connect to as shown in the next figure:.
Check the I acknowledge that this template might cause AWS CloudFormation to create IAM resources.Click Next to skip the Options step of the wizard.Specify a name and all parameters for the stack.Click Next to proceed with the next step of the wizard.This templates depends on one of our vpc-*azs.yaml templates.Installation Create the CloudFormation Stack If clamscan finds a virus the file is directly deleted (you can configure that) and a SNS notification is published.In the background the virus db is updated every three hours. The ClamAV workers run a simple ruby script that executes the clamscan command.If the queue is mostly empty workers are removed. If the number of outstanding scan jobs reaches a threshold a new ClamAV worker is automatically added. The SQS queue is consumed by a fleet of EC2 instances running in an Auto Scaling Group.This feature of S3 is called S3 Event Notifications. Each S3 bucket can fire events to that SQS queue in case of new objects. A SQS queue is used to decouple scan jobs from the ClamAV workers.CloudWatch Integration (Metrics and Dashboard)īucketAV - Antivirus for Amazon S3 with additional features is available at AWS Marketplace.Enhanced security features (e.g., IMDSv2).Scan buckets at regular intervals / initial bucket scan.Can optionally delete compromised files automaticallyĪdditional Commercial Features by bucketAV.Publishes a message to SNS in case of a finding.Scales EC2 instance workers to distribute the workload.Updates ClamAV database every 3 hours automatically.Uses ClamAV to scan newly added files on S3 buckets.Connect as many S3 buckets as you like.īucketAV - Antivirus for Amazon S3 with additional features is available at AWS Marketplace. This template creates a malware scanner cluster for S3 buckets.
0 kommentar(er)
