Slack messages
What you get
After each scan, each owner whose email matches someone in your Slack workspace gets one direct message about their new items, with buttons:
- I'll fix it: noted; it stays on the list until a scan sees it's gone.
- Keep: it's intended: moves it to "Kept or snoozed".
- Snooze 30 days: hides it for 30 days.
- Not mine: flags that the owner is wrong. It shows in Everything found and Reports; the fix is an
Ownertag on the resource, which the next scan picks up, or, if the name is right but isn't matched to a person, an owner name mapping.
Every click is recorded in Reports. The message also links to the ready-to-run fix. If nobody decides, the item comes to you after 14 days: This week. New security risks are sent within the hour, at the level you chose under New-risk alerts, and so are budget alerts.
Connect it (an admin, once)
- In Settings, under Slack owner messages, choose Add to Slack.
- Slack asks you to allow Strays to send messages and to find people in your workspace by email.
- Choose Allow. You come back to Settings, where it says which workspace is connected.
Slack is on the Team plan and above. If you don't see Add to Slack, your plan doesn't include it or Slack isn't set up on this Strays server yet.
Who gets a message
Owners are matched to Slack by email. An owner shown as an IAM user name or "Unknown" has no
email: map the name to their email on the People page, or
add an Owner tag with their email.
How owners are found.
A channel for owners Slack can't find
Some owners will never get a direct message: they have no email, or their email isn't in your Slack. Without a fallback channel their items just wait on the People and This week pages. To see them in Slack instead, an admin chooses a channel in Settings, under Owners Slack can't find:
- In Slack, open the channel and type
/invite @Strays. Strays may only post in channels it has been added to (it has thechat:writepermission, not permission to join channels itself). - In Settings, enter the channel's name (
#aws-alerts) or its ID (C0123ABCD, from Slack's channel details; private channels need the ID), and choose Save channel. - Strays posts a first message to check it can. If Slack refuses, Settings says what to do and nothing is saved.
After each scan the channel gets one message for each such owner, with their new items and the same buttons: "Nobody in Slack matches 'alex'. Map them to a person on the People page…". Each item is sent once. Map the name on People and next time they get a direct message instead. Items with no owner at all are not posted: they come to you on This week. Leave the channel empty to turn this off.
If Slack says the workspace is already connected
A Slack workspace can be connected to one Strays organisation at a time. If another organisation (perhaps a colleague's, started separately) has it, Strays says so when you try. Ask them to choose Disconnect Slack in their Settings, then connect again. Any other failure shows a general message; the support team can see the reason in Strays' logs.
Disconnecting
Choose Disconnect Slack in Settings. You can also remove the Strays app from your workspace in Slack.