Browse Source

Updates 300-s3-trumpet to latest to grant customer accounts access

New partition-level variable for customer accounts
Fred Damstra [afs macbook] 4 năm trước cách đây
mục cha
commit
7708509726

+ 2 - 1
common/aws-us-gov/afs-mdr-common-services-gov/300-s3-xdr-trumpet/terragrunt.hcl

@@ -18,7 +18,7 @@ locals {
 # working directory, into a temporary folder, and execute your Terraform commands in that folder.
 terraform {
   # Double slash is intentional and required to show root of modules
-  source = "git@github.xdr.accenturefederalcyber.com:mdr-engineering/xdr-terraform-modules.git//base/globally_accessible_bucket?ref=v1.24.4"
+  source = "git@github.xdr.accenturefederalcyber.com:mdr-engineering/xdr-terraform-modules.git//base/globally_accessible_bucket?ref=v1.24.5"
 }
 
 # Include all settings from the root terragrunt.hcl file
@@ -30,6 +30,7 @@ include {
 inputs = {
   name = "xdr-trumpet-${local.region_vars.locals.aws_region}"
   encryption = "SSE-S3"
+  extra_accounts = local.partition_vars.locals.customer_accounts
   tags = {
     Purpose = "Storage of Trumpet Scripts"
     Terraform = "aws/${basename(get_parent_terragrunt_dir())}/${path_relative_to_include()}/"

+ 2 - 1
common/aws-us-gov/afs-mdr-common-services-gov/us-gov-west-1/300-s3-xdr-trumpet/terragrunt.hcl

@@ -18,7 +18,7 @@ locals {
 # working directory, into a temporary folder, and execute your Terraform commands in that folder.
 terraform {
   # Double slash is intentional and required to show root of modules
-  source = "git@github.xdr.accenturefederalcyber.com:mdr-engineering/xdr-terraform-modules.git//base/globally_accessible_bucket?ref=v1.24.4"
+  source = "git@github.xdr.accenturefederalcyber.com:mdr-engineering/xdr-terraform-modules.git//base/globally_accessible_bucket?ref=v1.24.5"
 }
 
 # Include all settings from the root terragrunt.hcl file
@@ -30,6 +30,7 @@ include {
 inputs = {
   name = "xdr-trumpet-${local.region_vars.locals.aws_region}"
   encryption = "SSE-S3"
+  extra_accounts = local.partition_vars.locals.customer_accounts
   tags = {
     Purpose = "Storage of Trumpet Scripts"
     Terraform = "aws/${basename(get_parent_terragrunt_dir())}/${path_relative_to_include()}/"

+ 6 - 4
common/aws-us-gov/partition.hcl

@@ -62,8 +62,10 @@ locals {
     aws_partition = local.aws_partition
   }
 
-  # Some customers need access to the LCP 
-  #customer_aws_accounts_to_share_lcp_with = [
-  #  "738577959608",   # AFS AIP VA / CMPS / "C116"
-  #]
+  customer_accounts = [
+    "738577959608",  # AFS/CMPS AIP VA (No Ticket, email from Dalling in 10/2020)
+    "902039776828",  # AFS/CMPS FRTIB (MSOCI-1549)
+    "314025119334",  # AFS/CMPS BAS-Commerce (MSOCI-1554)
+    "392153378647",  # CA Dept of Health (MSOCI-1637)
+  ]
 }

+ 4 - 0
common/aws/partition.hcl

@@ -69,4 +69,8 @@ locals {
   partition_tags = {
     aws_partition = local.aws_partition
   }
+
+  customer_accounts = [
+
+  ]
 }