AWS S3 and CEF Connectors: Security Alert Remediation Fixes Error Handling Gaps

What Changed

Security alert remediation in AWS S3 Function App and CEF connector Python scripts addressing error handling vulnerabilities.

Security Impact (Visibility & Fidelity)

The fixes address potential security vulnerabilities in error handling paths:

AWS S3 Connector (init.py):

• Added explicit handling for unsupported file types to prevent silent failures
• Initialized sortedLogEvents variable to avoid undefined variable errors during processing
• These gaps could have caused the connector to fail silently or crash on unexpected file types

CEF Info Script (cef_gather_info.py):

• Initialized output variables (o, e) before subprocess communication to prevent undefined variable access
• Enhanced exception handling with descriptive error messages instead of silent failure
• Previously, command execution failures could cause undefined variable exceptions

Both fixes prevent potential crashes that would stop data ingestion entirely — deployments running the vulnerable versions risked complete connector failure when encountering edge cases in file processing or command execution.

Affected Files

DataConnectors/AWS-S3-AzureFunction/AzFun-AWS-S3-Ingestion/__init__.py
DataConnectors/CEF/cef_gather_info.py
(packaging artefacts: AzFun-AWS-S3-Ingestion.zip)