handle opt-in region during master account enable

aws-samples · Oct 6, 2020 · 6e6ba02 · 6e6ba02
1 parent 5cf6b59
commit 6e6ba02
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/src/securityhub_enabler.py b/src/securityhub_enabler.py
@@ -424,9 +424,12 @@ def enable_master(master_session, securityhub_regions, partition):
         except Exception as e:
             LOGGER.info(f"SecurityHub not currently Enabled on Master Account "
                         f"{master_account} in {region}. Enabling it.")
-            sh_master_client.enable_security_hub(
-                EnableDefaultStandards=False
-            )
+            try:
+                sh_master_client.enable_security_hub(
+                    EnableDefaultStandards=False
+                )
+            except:
+                LOGGER.error(f"Failed to enable SecurityHub in {region} or {master_account}")
         else:
             LOGGER.info(f"SecurityHub already Enabled in Master Account "
                         f"{master_account} in {region}")