Jeremy Cooper [AFS MBP]
7a4b5e6e65
Updates tfsec/chekov ignores | S3 Enable Logging/Versioning
|
3 年之前 | |
|---|---|---|
| .. | ||
| 000-mdradmin-bootstrap | 3 年之前 | |
| 001-tfstate | 3 年之前 | |
| 004-iam-okta | 3 年之前 | |
| 005-standard-iam | 3 年之前 | |
| 006-account-standards | 3 年之前 | |
| 006-account-standards-regional | 3 年之前 | |
| 008-xdr-binaries | 3 年之前 | |
| 010-public-dns | 3 年之前 | |
| 010-shared-ami-key | 3 年之前 | |
| 011-defpoint_com-legacy-dns | 3 年之前 | |
| 019-qualys-service-account | 3 年之前 | |
| 050-lcp-ami-sharing | 3 年之前 | |
| 072-salt-master-inventory-role | 3 年之前 | |
| 110-xdr-binaries-write-role | 3 年之前 | |
| 300-s3-xdr-trumpet | 3 年之前 | |
| us-east-2 | 3 年之前 | |
| us-west-1 | 3 年之前 | |
| us-west-2 | 3 年之前 | |
| README.md | 5 年之前 | |
| account.hcl | 3 年之前 | |
README.md
README
I'm not sure if this is a helpful readme or not tbh
Authentication
A handful of these need the static access keys for the MDRAdmin account, mostly because at that point of setting up a new AWS account we don't have the okta integration in place.
Subfolders / subprojects
| Subdirectory | auth | Purpose |
|---|---|---|
| 000-mdradmin-bootstrap | MDRAdmin + aws-mfa | Configures MDRAdmin Account to have IAM rights to create terraform state |
| 001-tfstate | MDRAdmin + aws-mfa | Creates TF state s3 bucket, dynamodb tables |
| 005-iam | okta + saml2aws | Fundamental IAM setup - does OKTA linkage, sets up user roles and policies |
| common | okta + saml2aws | Variable / provider definitions used across multiple chunks |