Merge pull request #5 from aquasecurity/require-tls-certificate-validation-lambda

fix: Require TLS certificate validation in Lambda's

Author: Noamstrauss

modules/single/modules/lambda/functions/create_cspm_key.py

@@ -38,7 +38,7 @@ def get_signature(aqua_secret, tstmp, path, method, body):
     return sig
 
 def http_request(url, headers, method, body=None):
-    http = urllib3.PoolManager(cert_reqs='CERT_NONE')
+    http = urllib3.PoolManager(cert_reqs='CERT_REQUIRED')
 
     try:
         response = http.request(method, url, body=body, headers=headers)

modules/single/modules/lambda/functions/generate_external_id.py

@@ -33,7 +33,7 @@ def http_request(url, headers, method, body=None):
     if body is None:
         body = {}
 
-    http = urllib3.PoolManager(cert_reqs='CERT_NONE')
+    http = urllib3.PoolManager(cert_reqs='CERT_REQUIRED')
 
     try:
         response = http.request(method, url, body=body, headers=headers)