Merge pull request #5 from aquasecurity/require-tls-certificate-valid…

…ation-lambda fix: Require TLS certificate validation in Lambda's
aquasecurity · Oct 6, 2024 · 7de94ab · 7de94ab
2 parents f018ebe + 21fad58
commit 7de94ab
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/modules/single/modules/lambda/functions/create_cspm_key.py b/modules/single/modules/lambda/functions/create_cspm_key.py
@@ -38,7 +38,7 @@ def get_signature(aqua_secret, tstmp, path, method, body):
     return sig
 
 def http_request(url, headers, method, body=None):
-    http = urllib3.PoolManager(cert_reqs='CERT_NONE')
+    http = urllib3.PoolManager(cert_reqs='CERT_REQUIRED')
 
     try:
         response = http.request(method, url, body=body, headers=headers)

diff --git a/modules/single/modules/lambda/functions/generate_external_id.py b/modules/single/modules/lambda/functions/generate_external_id.py
@@ -33,7 +33,7 @@ def http_request(url, headers, method, body=None):
     if body is None:
         body = {}
 
-    http = urllib3.PoolManager(cert_reqs='CERT_NONE')
+    http = urllib3.PoolManager(cert_reqs='CERT_REQUIRED')
 
     try:
         response = http.request(method, url, body=body, headers=headers)