AWS AppSec Finding: Default CloudWatch Agent Configuration Not Optimi…

…zed for Security (#950)
aws · Nov 9, 2023 · 1ce2478 · 1ce2478
1 parent e72dba6
commit 1ce2478
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/tool/processors/agentconfig/agentConfig.go b/tool/processors/agentconfig/agentConfig.go
@@ -36,7 +36,7 @@ func whichRunAsUser(ctx *runtime.Context, config *data.Config) {
 
 	answer := util.Choice("Which user are you planning to run the agent?",
 		1,
-		[]string{RUNASUSER_ROOT, RUNASUSER_CWAGENT, RUNASUSER_OTHERS})
+		[]string{RUNASUSER_CWAGENT, RUNASUSER_ROOT, RUNASUSER_OTHERS})
 
 	if answer == RUNASUSER_OTHERS {
 		answer = util.Ask("Please specify your own user(remember the user must exist before the agent running):")

diff --git a/tool/processors/agentconfig/agentConfig_test.go b/tool/processors/agentconfig/agentConfig_test.go
@@ -21,15 +21,15 @@ func TestProcessor_Process(t *testing.T) {
 
 	testutil.Type(inputChan, "")
 	Processor.Process(ctx, conf)
-	assert.Equal(t, RUNASUSER_ROOT, conf.AgentConfig.Runasuser)
+	assert.Equal(t, RUNASUSER_CWAGENT, conf.AgentConfig.Runasuser)
 
 	testutil.Type(inputChan, "1")
 	Processor.Process(ctx, conf)
-	assert.Equal(t, RUNASUSER_ROOT, conf.AgentConfig.Runasuser)
+	assert.Equal(t, RUNASUSER_CWAGENT, conf.AgentConfig.Runasuser)
 
 	testutil.Type(inputChan, "2")
 	Processor.Process(ctx, conf)
-	assert.Equal(t, RUNASUSER_CWAGENT, conf.AgentConfig.Runasuser)
+	assert.Equal(t, RUNASUSER_ROOT, conf.AgentConfig.Runasuser)
 
 	testutil.Type(inputChan, "3", "testuser")
 	Processor.Process(ctx, conf)