Merge pull request #2 from cloudmitigator/dev-notification-message-fix

Patch: Send different messages for detect and remediate modes
reflexivesecurity · Apr 9, 2020 · 40c73a3 · 40c73a3
2 parents c4fbe7c + 7aa9275
commit 40c73a3
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/source/reflex_aws_kms_key_rotation_disabled.py b/source/reflex_aws_kms_key_rotation_disabled.py
@@ -39,10 +39,11 @@ def remediate(self):
 
  def get_remediation_message(self):
  """ Returns a message about the remediation action that occurred """
- return (
- f"A KMS key (Key Id: {self.key_id}) had key rotation disabled. "
- f"Rotation has been enabled."
- )
+ message = f"A KMS key (Key Id: {self.key_id}) had key rotation disabled. "
+ if self.should_remediate():
+ message += "Rotation has been enabled."
+
+ return message
 
 
 def lambda_handler(event, _):