Require certificate verification in aqua-autoconnect-create-cspm-key-function #9
Description
Is your feature request related to a problem? Please describe.
Cloudwatch log group /aws/lambda/aqua-autoconnect-create-cspm-key-function-xxxxxx contains the following warning:
/var/lang/lib/python3.12/site-packages/urllib3/connectionpool.py:1063: InsecureRequestWarning: Unverified HTTPS request is being made to host 'eu-1.api.cloudsploit.com'. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/1.26.x/advanced-usage.html#ssl-warnings
Describe the solution you'd like
The lambda should require SSL verification.
Probably a one-line change in modules/lambda/functions/create_cspm_key.py:
- http = urllib3.PoolManager(cert_reqs='CERT_NONE')
+ http = urllib3.PoolManager(cert_reqs='CERT_REQUIRED')
Describe alternatives you've considered
none
Additional context
The other lambdas, which generate external ids, already verify SSL certificates.