xdr-terraform-live/prod/aws-us-gov/mdr-prod-c2/096-sensu-configuration/README.md

Sensu Configuration

To use the TF Sensu provider set the password via a env variable. The username is static in terragrunt.hcl. The password is located at engineering/sensu/sensu-prod/admin

in one line to apply:

SENSU_PASSWORD=blah terragrunt apply

OR...

SENSU_PASSWORD=
echo $SENSU_PASSWORD

If you are an idiot and add an ! to the password you can escape it like this:

e!password

export SENSU_PASSWORD=e\!password

AWS Secrets Manager Requirement

To support email from sensu, we now need an AWS secrets manager secret available that has the SMTP host (mailrelay) information.

In AWS secrets manager, a secret named "smtp/smtp_creds" needs to be IN THE C2 account. The Secret value needs to be a key/value that encodes as JSON like:

{ "mail_from_domain": "xdrtest.accenturefederalcyber.com", "mail_host": "mailrelay2.pvt.xdrtest.accenturefederalcyber.com", "mail_user": "xdrtestpostfix@pvt.xdrtest.accenturefederalcyber.com", "mail_password": "the_password_in_salt" } `

If you don't set this up BEFORE trying to apply this terraform, a bad time will be had.