Fred Damstra c8cfadc38e Revamps standard_tags to be built from multiple hcl specific files il y a 5 ans
..
000-mdradmin-bootstrap e9366e6600 Merges mdr-common-services and afs-mdr-common-services-gov directories il y a 5 ans
001-tfstate b88d35dda1 common/aws-us-gov/afs-mdr-common-services-gov now matches reality il y a 5 ans
004-iam-okta b88d35dda1 common/aws-us-gov/afs-mdr-common-services-gov now matches reality il y a 5 ans
006-account-standards 7950266810 Minor cleanup il y a 5 ans
008-xdr-binaries b88d35dda1 common/aws-us-gov/afs-mdr-common-services-gov now matches reality il y a 5 ans
010-shared-ami-key 77f1c6450f Adds vmimport role to accounts sharing ami il y a 5 ans
015-security-vpc 7950266810 Minor cleanup il y a 5 ans
016-panorama b88d35dda1 common/aws-us-gov/afs-mdr-common-services-gov now matches reality il y a 5 ans
017-palo-alto-bootstrap aabfeffde8 Palo Alto Infrastructure and Nodes il y a 5 ans
018-palo-alto-firewalls 7950266810 Minor cleanup il y a 5 ans
README.md e9366e6600 Merges mdr-common-services and afs-mdr-common-services-gov directories il y a 5 ans
account.hcl c8cfadc38e Revamps standard_tags to be built from multiple hcl specific files il y a 5 ans

README.md

Common Services - GovCloud

I'm not sure if this is a helpful readme or not tbh

Authentication

A handful of these need the static access keys for the MDRAdmin account, mostly because at that point of setting up a new AWS account we don't have the okta integration in place.

Subfolders / subprojects

Subdirectory auth Purpose
000-mdradmin-bootstrap MDRAdmin + aws-mfa Configures MDRAdmin Account to have IAM rights to create terraform state
001-tfstate MDRAdmin + aws-mfa Creates TF state s3 bucket, dynamodb tables
005-iam okta + saml2aws Fundamental IAM setup - does OKTA linkage, sets up user roles and policies