Home Explore Help
Register Sign In
AFS
/
xdr-terraform-live
2
0
Fork 0
Files Issues 0 Pull Requests 0 Wiki
Tree: 90f5a436ff
Branches Tags
xdr-terraform-l...
/
prod
/
aws-us-gov
/
mdr-prod-malware
Fred Damstra [afs macbook] 51f121668c Updates Modules Affected by Fred's IP Change 3 years ago
..
005-iam 5cea7b75ca Updates tag for IAM tfsec Ignore Comments and legacy URL for IP list 3 years ago
006-account-standards 1519a2cd30 Migrated most variables out of xdr-terraform-live and into xdr-terraform-modules 3 years ago
006-account-standards-regional 1519a2cd30 Migrated most variables out of xdr-terraform-live and into xdr-terraform-modules 3 years ago
007-backups 1519a2cd30 Migrated most variables out of xdr-terraform-live and into xdr-terraform-modules 3 years ago
010-vpc-vmray 51f121668c Updates Modules Affected by Fred's IP Change 3 years ago
023-dns-resolver-instance 1519a2cd30 Migrated most variables out of xdr-terraform-live and into xdr-terraform-modules 3 years ago
044-VMRay-Instances 9503c51393 Updates ALB Prod env to Drop Invalid headers 3 years ago
072-salt-master-inventory-role 1519a2cd30 Migrated most variables out of xdr-terraform-live and into xdr-terraform-modules 3 years ago
README.md f6509ccb11 Adds a resolver instance to the VMRay VPC 3 years ago
account.hcl 5cea7b75ca Updates tag for IAM tfsec Ignore Comments and legacy URL for IP list 3 years ago

README.md

mdr-prod-malware

Account for hosting vmray and/or other malware detonation.

NOTE ON DNS

DNS resolvers exist in this account, in the vpc 010... However, the vpc relies on having dns resolvers to set the DHCP options.

So chicken/egg.

Here's how to do it.

1) Create the vpc with the default var.dns_servers. 2) Create the resolver 3) Update the VPC, overriding var.dns_servers with the IP from #2