Forum Discussion

Tultyboy's avatar
Tultyboy
Icon for Bronze I rankBronze I
22 days ago

GuardDuty: Demonstrate Your Skills

Has anyone had any issues with the GuardDuty lab. GuardDuty: Demonstrate Your Skills - Labs - Immersive

In task no.4 It asked you: In order to encrypt findings being exported to S3, GuardDuty requires a KMS key

The KMS key policy must give the required permissions to the GuardDuty service principal.

I have amended the policy as followed.

 "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "Allow GuardDutytoencryptfindings",
      "Effect": "Allow",
      "Principal": {
        "Service": "guardduty.amazonaws.com"
      },
      "Action": [
        "kms:GenerateDataKey",
      ],
      "Resource": "*"

The lab isn't progressing past this. Am I doing something wrong or is it a bug in the lab.

Any help is appreciated,

Thanks

 

I

immersive labs

1 Reply

  • LewisMutton's avatar
    LewisMutton
    Icon for Bronze II rankBronze II
    18 days ago

    I have just gone through this lab to see what the problem might be, make sure that you have answered the previous questions for task 4 to get marked as completed.

    Looking at your snippet, it looks like you have changed the 'Resource' value that is pre-populated in the KMS key, try without changing this value and only updating the 'Action' value.

    The lab is working, no bug, you're not far wrong!