Testing function-shield

envvars

# Source these to pretend you're running in AWS Lambda
# Tested on Linux, might work on OSX
AWS_EXECUTION_ENV=AWS_Lambda_python2.7
_HANDLER=handler
FUNCTION_SHIELD_TOKEN='base64encoded token you can get from puresec'
# you will also need to create a dir for the function code under /var
# mkdir -p /var/task && ln <fullpath to your the file above> /var/task/handler.py

t.py

import os
import function_shield
import subprocess

function_shield.configure({
    "policy": {
        "read_write_tmp": "alert",
        "create_child_process": "alert",
        "outbound_connectivity": "block",
        "read_handler": "block"
    },
    "disable_analytics": True,
    "token": os.environ['FUNCTION_SHIELD_TOKEN']
})


def hello(event, context):
    print("started")
    with open('/tmp/python-alert', 'w'):
        pass
    with open('/var/task/handler.py', 'r'):
        pass

    subprocess.Popen('touch /tmp/hello', shell=True)
    os.system('curl 4.4.4.4')
    os.system('curl http://localhost:8000/')
    # os.system('cat /var/task/handler.py')
    return True

if __name__ == '__main__':
    hello(1, 2)