Inicio Explorar Axuda
Rexistro Iniciar sesión
AFS
/
xdr-terraform-live
2
0
Fork 0
Ficheiros Incidencias 0 Pull Requests 0 Wiki
Árbore: 99be472060
Ramas Etiquetas
xdr-terraform-l...
/
common
/
aws-us-gov
/
afs-mdr-common-services-gov
Duane Waddle 99be472060 [MSOCI-1334] Adding Qualys connectors %!s(int64=5) %!d(string=hai) anos
..
000-mdradmin-bootstrap e9366e6600 Merges mdr-common-services and afs-mdr-common-services-gov directories %!s(int64=5) %!d(string=hai) anos
001-tfstate b88d35dda1 common/aws-us-gov/afs-mdr-common-services-gov now matches reality %!s(int64=5) %!d(string=hai) anos
004-iam-okta b88d35dda1 common/aws-us-gov/afs-mdr-common-services-gov now matches reality %!s(int64=5) %!d(string=hai) anos
006-account-standards ca2cc26278 Brings common accounts up to standards %!s(int64=5) %!d(string=hai) anos
006-account-standards-regional ca2cc26278 Brings common accounts up to standards %!s(int64=5) %!d(string=hai) anos
008-xdr-binaries ca2cc26278 Brings common accounts up to standards %!s(int64=5) %!d(string=hai) anos
010-shared-ami-key ca2cc26278 Brings common accounts up to standards %!s(int64=5) %!d(string=hai) anos
015-security-vpc ca2cc26278 Brings common accounts up to standards %!s(int64=5) %!d(string=hai) anos
016-panorama ca2cc26278 Brings common accounts up to standards %!s(int64=5) %!d(string=hai) anos
017-palo-alto-bootstrap ca2cc26278 Brings common accounts up to standards %!s(int64=5) %!d(string=hai) anos
018-palo-alto-firewalls ca2cc26278 Brings common accounts up to standards %!s(int64=5) %!d(string=hai) anos
019-qualys-service-account 99be472060 [MSOCI-1334] Adding Qualys connectors %!s(int64=5) %!d(string=hai) anos
021-qualys-connector-role 99be472060 [MSOCI-1334] Adding Qualys connectors %!s(int64=5) %!d(string=hai) anos
README.md e9366e6600 Merges mdr-common-services and afs-mdr-common-services-gov directories %!s(int64=5) %!d(string=hai) anos
account.hcl 99be472060 [MSOCI-1334] Adding Qualys connectors %!s(int64=5) %!d(string=hai) anos

README.md

Common Services - GovCloud

I'm not sure if this is a helpful readme or not tbh

Authentication

A handful of these need the static access keys for the MDRAdmin account, mostly because at that point of setting up a new AWS account we don't have the okta integration in place.

Subfolders / subprojects

Subdirectory auth Purpose
000-mdradmin-bootstrap MDRAdmin + aws-mfa Configures MDRAdmin Account to have IAM rights to create terraform state
001-tfstate MDRAdmin + aws-mfa Creates TF state s3 bucket, dynamodb tables
005-iam okta + saml2aws Fundamental IAM setup - does OKTA linkage, sets up user roles and policies