The "Check if IPv4 Address is Part of an AWS IP Network Block" workflow template is designed to assist in Cloud Security Posture Management (CSPM). When the keyword "isaws" is mentioned to a Slack bot along with an IPv4 address, this workflow automatically verifies if the IPv4 address is associated with an Amazon Web Services (AWS) network block. If a match is found, it generates an ASCII table containing details of the AWS resource and region, sending this information back to the requestor via the originating Slack thread. This workflow streamlines network monitoring and enhances security by efficiently identifying and reporting AWS network integrations.
Trigger
Slack
Optional Triggers
"Microsoft Teams"
Use Cases
CSPM
Workflow Breakdown
Mention the keyword "isaws" to the Slack bot with the IPv4 address
If an IPv4 address is found, try to match the address to a network block in use at AWS
If a match is found, create an ASCII table and send it to the requestor in the Slack thread.
Vendors
Slack, Scripting, Utils, HTTP
Workflow Output
Information on the AWS resource and region if a match is found.