Fred Damstra [afs macbook]
4d1bf59d56
Updates tfswitch to 0.13.7
|
4 年之前 | |
|---|---|---|
| .. | ||
| 000-mdradmin-bootstrap | 4 年之前 | |
| 001-tfstate | 4 年之前 | |
| 004-iam-okta | 4 年之前 | |
| 006-account-standards | 4 年之前 | |
| 006-account-standards-regional | 4 年之前 | |
| 008-xdr-binaries | 4 年之前 | |
| 010-public-dns | 4 年之前 | |
| 010-shared-ami-key | 4 年之前 | |
| 011-defpoint_com-legacy-dns | 4 年之前 | |
| 015-security-vpc | 4 年之前 | |
| 019-qualys-service-account | 4 年之前 | |
| 050-lcp-ami-sharing | 4 年之前 | |
| 072-salt-master-inventory-role | 4 年之前 | |
| 110-xdr-binaries-write-role | 4 年之前 | |
| us-east-2 | 4 年之前 | |
| us-west-1 | 4 年之前 | |
| us-west-2 | 4 年之前 | |
| README.md | 5 年之前 | |
| account.hcl | 4 年之前 | |
README.md
README
I'm not sure if this is a helpful readme or not tbh
Authentication
A handful of these need the static access keys for the MDRAdmin account, mostly because at that point of setting up a new AWS account we don't have the okta integration in place.
Subfolders / subprojects
| Subdirectory | auth | Purpose |
|---|---|---|
| 000-mdradmin-bootstrap | MDRAdmin + aws-mfa | Configures MDRAdmin Account to have IAM rights to create terraform state |
| 001-tfstate | MDRAdmin + aws-mfa | Creates TF state s3 bucket, dynamodb tables |
| 005-iam | okta + saml2aws | Fundamental IAM setup - does OKTA linkage, sets up user roles and policies |
| common | okta + saml2aws | Variable / provider definitions used across multiple chunks |