Home Explore Help
Register Sign In
AFS
/
xdr-terraform-live
2
0
Fork 0
Files Issues 0 Pull Requests 0 Wiki
Tree: 79d04e37d7
Branches Tags
xdr-terraform-l...
/
common
/
aws
/
mdr-common-services
Fred Damstra [afs macbook] 442bbbb1e7 Updates account-standards-regional to latest and adds 007-backups 4 years ago
..
000-mdradmin-bootstrap 9bf337defd Updates to work with later versions of tfswitch 4 years ago
001-tfstate 9bf337defd Updates to work with later versions of tfswitch 4 years ago
004-iam-okta 9bf337defd Updates to work with later versions of tfswitch 4 years ago
006-account-standards 792eac37e6 Updates Account Standards and VPC Modules to latest 4 years ago
006-account-standards-regional 442bbbb1e7 Updates account-standards-regional to latest and adds 007-backups 4 years ago
008-xdr-binaries 9bf337defd Updates to work with later versions of tfswitch 4 years ago
010-public-dns 9bf337defd Updates to work with later versions of tfswitch 4 years ago
010-shared-ami-key 9bf337defd Updates to work with later versions of tfswitch 4 years ago
011-defpoint_com-legacy-dns 9bf337defd Updates to work with later versions of tfswitch 4 years ago
015-security-vpc 792eac37e6 Updates Account Standards and VPC Modules to latest 4 years ago
019-qualys-service-account 9bf337defd Updates to work with later versions of tfswitch 4 years ago
050-lcp-ami-sharing 9bf337defd Updates to work with later versions of tfswitch 4 years ago
072-salt-master-inventory-role 9bf337defd Updates to work with later versions of tfswitch 4 years ago
110-xdr-binaries-write-role 9bf337defd Updates to work with later versions of tfswitch 4 years ago
us-east-2 9bf337defd Updates to work with later versions of tfswitch 4 years ago
us-west-1 9bf337defd Updates to work with later versions of tfswitch 4 years ago
us-west-2 9bf337defd Updates to work with later versions of tfswitch 4 years ago
README.md 671dc26b50 Initial Commit 5 years ago
account.hcl 756290d4c0 DNSSEC Partial Enablement 4 years ago

README.md

README

I'm not sure if this is a helpful readme or not tbh

Authentication

A handful of these need the static access keys for the MDRAdmin account, mostly because at that point of setting up a new AWS account we don't have the okta integration in place.

Subfolders / subprojects

Subdirectory auth Purpose
000-mdradmin-bootstrap MDRAdmin + aws-mfa Configures MDRAdmin Account to have IAM rights to create terraform state
001-tfstate MDRAdmin + aws-mfa Creates TF state s3 bucket, dynamodb tables
005-iam okta + saml2aws Fundamental IAM setup - does OKTA linkage, sets up user roles and policies
common okta + saml2aws Variable / provider definitions used across multiple chunks