{"action":"created","issue":{"url":"https://api.github.com/repos/mapbox/patrol-rules-aws/issues/95","repository_url":"https://api.github.com/repos/mapbox/patrol-rules-aws","labels_url":"https://api.github.com/repos/mapbox/patrol-rules-aws/issues/95/labels{/name}","comments_url":"https://api.github.com/repos/mapbox/patrol-rules-aws/issues/95/comments","events_url":"https://api.github.com/repos/mapbox/patrol-rules-aws/issues/95/events","html_url":"https://github.com/mapbox/patrol-rules-aws/pull/95","id":188627104,"number":95,"title":"Alarm when someone creates EC2 instance from console","user":{"login":"piligab","id":19536044,"avatar_url":"https://avatars.githubusercontent.com/u/19536044?v=3","gravatar_id":"","url":"https://api.github.com/users/piligab","html_url":"https://github.com/piligab","followers_url":"https://api.github.com/users/piligab/followers","following_url":"https://api.github.com/users/piligab/following{/other_user}","gists_url":"https://api.github.com/users/piligab/gists{/gist_id}","starred_url":"https://api.github.com/users/piligab/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/piligab/subscriptions","organizations_url":"https://api.github.com/users/piligab/orgs","repos_url":"https://api.github.com/users/piligab/repos","events_url":"https://api.github.com/users/piligab/events{/privacy}","received_events_url":"https://api.github.com/users/piligab/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-11-10T21:46:52Z","updated_at":"2016-11-11T18:58:29Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/mapbox/patrol-rules-aws/pulls/95","html_url":"https://github.com/mapbox/patrol-rules-aws/pull/95","diff_url":"https://github.com/mapbox/patrol-rules-aws/pull/95.diff","patch_url":"https://github.com/mapbox/patrol-rules-aws/pull/95.patch"},"body":"It is very rare that someone should ever need to create an EC2 instance from the console. When an EC2 instance is created from the console, scripts like buildpack and seatbelts are not installed on the EC2, making the EC2 less secure if any of its ports are open to the internet.\r\n\r\n#### Note:\r\nIt should be noted that allowed users be autoscaling and cloudformation. \r\n#### This rule trigger an alarm if an users different the autoscaling or cloudformation creates an EC2 from the console.\r\n\r\ncc. @ianshward  @Rub21 "},"comment":{"url":"https://api.github.com/repos/mapbox/patrol-rules-aws/issues/comments/260029249","html_url":"https://github.com/mapbox/patrol-rules-aws/pull/95#issuecomment-260029249","issue_url":"https://api.github.com/repos/mapbox/patrol-rules-aws/issues/95","id":260029249,"user":{"login":"Rub21","id":1152236,"avatar_url":"https://avatars.githubusercontent.com/u/1152236?v=3","gravatar_id":"","url":"https://api.github.com/users/Rub21","html_url":"https://github.com/Rub21","followers_url":"https://api.github.com/users/Rub21/followers","following_url":"https://api.github.com/users/Rub21/following{/other_user}","gists_url":"https://api.github.com/users/Rub21/gists{/gist_id}","starred_url":"https://api.github.com/users/Rub21/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Rub21/subscriptions","organizations_url":"https://api.github.com/users/Rub21/orgs","repos_url":"https://api.github.com/users/Rub21/repos","events_url":"https://api.github.com/users/Rub21/events{/privacy}","received_events_url":"https://api.github.com/users/Rub21/received_events","type":"User","site_admin":false},"created_at":"2016-11-11T18:58:29Z","updated_at":"2016-11-11T18:58:29Z","body":"I will fix some issues here  and do the test!"}}
{"actor":{"display_login":"Rub21"}}