Function Removal - AWS

This playbook automates the removal of an AWS Lambda function and its associated resources used for managing resources within an Amazon EKS cluster. It ensures all related roles, policies, and security configurations are properly detached and deleted. ### Resource Detachment and Deletion - **Get the Lambda Role**: Retrieve the IAM role associated with the Lambda function. - **Detach Policy from Lambda Role**: Remove the policy attached to the Lambda role. - **Delete IAM Role**: Delete the IAM role that was used for the Lambda function. - **Delete Lambda Policy**: Remove the policy specifically created for the Lambda function. - **Delete Security Group**: Delete the security group that was managing the Lambda function's traffic. ### Access Entry Check - **Check if Access Entry was Created**: Verify if the access entry for the EKS cluster was created. - **If YES**: Proceed to delete additional resources. - **If NO**: Skip the deletion of additional resources. ### Additional Resource Deletion - **Delete Kubernetes Layer**: Remove the Kubernetes layer that was used by the Lambda function. - **Delete Lambda Function**: Delete the Lambda function itself, ensuring all related code and configurations are removed. ### Resolution - **Final Cleanup**: Ensure all specified resources have been deleted successfully. - **Completion**: Confirm that the removal process is complete, providing a clean environment free from the previously deployed Lambda function and its configurations. This playbook provides a comprehensive, automated approach to removing an AWS Lambda function and its related resources, ensuring all configurations and dependencies are properly managed and deleted. ### Required Integration #### AWS IAM (Identity and Access Management) - [AWS IAM API Documentation](https://docs.aws.amazon.com/IAM/latest/APIReference/Welcome.html) - [Cortex XSOAR AWS IAM Integration](https://cortex.marketplace.pan.dev/marketplace/details/AWSIAM/) #### AWS EC2 (Elastic Compute Cloud) - [AWS EC2 API Documentation](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Welcome.html) - [Cortex XSOAR AWS EC2 Integration](https://cortex.marketplace.pan.dev/marketplace/details/AWSEC2/) #### AWS Lambda - [AWS Lambda API Documentation](https://docs.aws.amazon.com/lambda/latest/dg/API_Reference.html) - [Cortex XSOAR AWS Lambda Integration](https://cortex.marketplace.pan.dev/marketplace/details/AWSLambda/).

AWS Enrichment and Remediation · 10 tasks · 7 inputs · 0 outputs

Inputs

  • region — The region of the resource.
  • LambdaFunctionName — The Lambda function name.
  • LambdaLayerVersion — The Lambda layer version.
  • LambdaLayerName — The Lambda layer name.
  • LambdaRoleName — The lambda role name to delete.
  • LambdaRolePolicyARN — The ARN of the policy to delete.
  • SecurityGroupID — The security group ID.

Commands used

aws-ec2-delete-security-group aws-iam-delete-policy aws-iam-delete-role aws-iam-detach-policy aws-iam-get-role aws-lambda-delete-function aws-lambda-delete-layer-version

Flowchart

yes Start Start Delete an AWS IAM role - aws-iam-delete-role Delete an AWS IAM role aws-iam-delete-role Delete the lambda policy - aws-iam-delete-policy Delete the lambda policy aws-iam-delete-policy Delete the kubernetes layer - aws-lambda-delete-layer-version Delete the kubernetes layer aws-lambda-delete-layer-version Delete the lambda function - aws-lambda-delete-function Delete the lambda function aws-lambda-delete-function Done Done Detach policy from the Lambda role - aws-iam-detach-policy Detach policy from the La... aws-iam-detach-policy Get the Lambda role - aws-iam-get-role Get the Lambda role aws-iam-get-role Delete the security group - aws-ec2-delete-security-group Delete the security group aws-ec2-delete-security-group Check if an access entry was created Check if an access entry ...