Feature Request - Route53 Integration ++ Security Improvments

[lucasaboud0]

Hello Guys.

Opening this Feature Request to ask you some stuff that help us to management the cluster and keep the stuffs safe.

1. It would be very interesting if LAMBDA that updates DynamoDB also updated/created a DNS entry in Route53, keeping the name of the Firewall Master always with the IP (private and public) updated. It would help us with cluster management.
2. The permission created for LAMBDA is S3 Full for all buckets. This generates several security issues in several cloud systems. It would be good to limit the permissions used by LAMBDA and limit the policy resource with the Bucket name/path.
3. The ENV VAR with the Firewall password is in plain text. It would be good to use AWS password vault for this.

Thanks in Advanced.

[lix-fortinet]

Hi @lucasaboud0,

Thank you for raising this issue. We will investigate and improve it.

Thanks,
Xing