Merge pull request #11 from jparr/isolate-with-existing

Use filter to find existing groupId
ThreatResponse · Jul 21, 2017 · dfab234 · dfab234
2 parents 7dba140 + 0c9bf0c
commit dfab234
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/aws_ir_plugins/isolate_host.py b/aws_ir_plugins/isolate_host.py
@@ -63,9 +63,12 @@ def _create_isolation_security_group(self):
             self.exists = True
             security_group_result = self.client.describe_security_groups(
                 DryRun=self.dry_run,
-                GroupNames=[
-                    self._generate_security_group_name()
-                ]
+                Filters=[{
+                    'Name': 'group-name',
+                    'Values': [
+                        self._generate_security_group_name(),
+                    ]
+                }]
             )['SecurityGroups'][0]
         return security_group_result['GroupId']