Jeremy Cooper [AFS MBP]
486918f2d8
Updates tags to AWS v4 compatibility
|
il y a 3 ans | |
|---|---|---|
| .. | ||
| 000-mdradmin-bootstrap | il y a 3 ans | |
| 001-tfstate | il y a 3 ans | |
| 004-iam-okta | il y a 3 ans | |
| 006-account-standards | il y a 3 ans | |
| 006-account-standards-regional | il y a 3 ans | |
| 008-xdr-binaries | il y a 3 ans | |
| 010-public-dns | il y a 3 ans | |
| 010-shared-ami-key | il y a 3 ans | |
| 011-defpoint_com-legacy-dns | il y a 3 ans | |
| 015-security-vpc | il y a 3 ans | |
| 019-qualys-service-account | il y a 3 ans | |
| 050-lcp-ami-sharing | il y a 3 ans | |
| 072-salt-master-inventory-role | il y a 3 ans | |
| 110-xdr-binaries-write-role | il y a 3 ans | |
| 300-s3-xdr-trumpet | il y a 3 ans | |
| us-east-2 | il y a 3 ans | |
| us-west-1 | il y a 3 ans | |
| us-west-2 | il y a 3 ans | |
| README.md | il y a 5 ans | |
| account.hcl | il y a 3 ans | |
README.md
README
I'm not sure if this is a helpful readme or not tbh
Authentication
A handful of these need the static access keys for the MDRAdmin account, mostly because at that point of setting up a new AWS account we don't have the okta integration in place.
Subfolders / subprojects
| Subdirectory | auth | Purpose |
|---|---|---|
| 000-mdradmin-bootstrap | MDRAdmin + aws-mfa | Configures MDRAdmin Account to have IAM rights to create terraform state |
| 001-tfstate | MDRAdmin + aws-mfa | Creates TF state s3 bucket, dynamodb tables |
| 005-iam | okta + saml2aws | Fundamental IAM setup - does OKTA linkage, sets up user roles and policies |
| common | okta + saml2aws | Variable / provider definitions used across multiple chunks |