✨ add state transition time to aws ec2 instance (#1822)

mondoohq · Oct 1, 2023 · 6f7c407 · 6f7c407
1 parent 280e4b3
commit 6f7c407
Show file tree

Hide file tree

Showing 4 changed files with 29 additions and 1 deletion.
diff --git a/providers/aws/resources/aws.lr b/providers/aws/resources/aws.lr
@@ -1660,6 +1660,8 @@ private aws.ec2.instance @defaults("arn state") {
   privateDnsName string
   // Keypair associated with the instance
   keypair() aws.ec2.keypair
+  // Time when the last state transition occurred
+  stateTransitionTime time
 }
 
 // Amazon EC2 Key Pair

diff --git a/providers/aws/resources/aws.lr.go b/providers/aws/resources/aws.lr.go
diff --git a/providers/aws/resources/aws.lr.manifest.yaml b/providers/aws/resources/aws.lr.manifest.yaml
@@ -860,6 +860,8 @@ resources:
       state: {}
       stateReason: {}
       stateTransitionReason: {}
+      stateTransitionTime:
+        min_mondoo_version: 9.0.0
       tags: {}
       vpc: {}
     is_private: true

diff --git a/providers/aws/resources/aws_ec2.go b/providers/aws/resources/aws_ec2.go
@@ -6,8 +6,10 @@ package resources
 import (
 	"context"
 	"fmt"
+	"regexp"
 	"strconv"
 	"strings"
+	"time"
 
 	"github.com/aws/aws-sdk-go-v2/service/ec2"
 	ec2types "github.com/aws/aws-sdk-go-v2/service/ec2/types"
@@ -694,7 +696,16 @@ func (a *mqlAwsEc2) gatherInstanceInfo(instances []ec2types.Reservation, imdsvVe
 			if err != nil {
 				return nil, err
 			}
-
+			var stateTransitionTime time.Time
+			reg := regexp.MustCompile(`.*\((\d{4}-\d{2}-\d{2}\s\d{2}:\d{2}:\d{2}) GMT\)`)
+			timeString := reg.FindStringSubmatch(convert.ToString(instance.StateTransitionReason))
+			if len(timeString) == 2 {
+				stateTransitionTime, err = time.Parse(time.DateTime, timeString[1])
+				if err != nil {
+					log.Error().Err(err).Msg("cannot parse state transition time for ec2 instance")
+					stateTransitionTime = llx.NeverPastTime
+				}
+			}
 			args := map[string]*llx.RawData{
 				"platformDetails":       llx.StringData(convert.ToString(instance.PlatformDetails)),
 				"arn":                   llx.StringData(fmt.Sprintf(ec2InstanceArnPattern, regionVal, conn.AccountId(), convert.ToString(instance.InstanceId))),
@@ -715,6 +726,7 @@ func (a *mqlAwsEc2) gatherInstanceInfo(instances []ec2types.Reservation, imdsvVe
 				"launchTime":            llx.TimeData(toTime(instance.LaunchTime)),
 				"privateIp":             llx.StringData(convert.ToString(instance.PrivateIpAddress)),
 				"privateDnsName":        llx.StringData(convert.ToString(instance.PrivateDnsName)),
+				"stateTransitionTime":   llx.TimeData(stateTransitionTime),
 			}
 
 			if instance.ImageId != nil {