Inicio Explorar Axuda
Rexistro Iniciar sesión
AFS
/
xdr-terraform-live
2
0
Fork 0
Ficheiros Incidencias 0 Pull Requests 0 Wiki
Árbore: cecb395b5b
Ramas Etiquetas
xdr-terraform-l...
/
common
/
aws-us-gov
/
afs-mdr-common-services-gov
Duane Waddle ef30adcfd6 Fixed merge conflicts %!s(int64=4) %!d(string=hai) anos
..
000-mdradmin-bootstrap 87ac71ad57 Adds support for a "DISABLED" file to skip select modules %!s(int64=4) %!d(string=hai) anos
001-tfstate 87ac71ad57 Adds support for a "DISABLED" file to skip select modules %!s(int64=4) %!d(string=hai) anos
004-iam-okta dae5830a43 Adds a .tfswitch.toml to each module to select the appropriate tf version %!s(int64=4) %!d(string=hai) anos
006-account-standards 2c3e7def46 Updates 006-account-standards to current %!s(int64=4) %!d(string=hai) anos
006-account-standards-regional 9e0eebc2b9 Updates the GitHub URL %!s(int64=4) %!d(string=hai) anos
008-xdr-binaries 9e0eebc2b9 Updates the GitHub URL %!s(int64=4) %!d(string=hai) anos
010-shared-ami-key 9e0eebc2b9 Updates the GitHub URL %!s(int64=4) %!d(string=hai) anos
015-security-vpc 9e0eebc2b9 Updates the GitHub URL %!s(int64=4) %!d(string=hai) anos
019-qualys-service-account 9e0eebc2b9 Updates the GitHub URL %!s(int64=4) %!d(string=hai) anos
021-qualys-connector-role 9e0eebc2b9 Updates the GitHub URL %!s(int64=4) %!d(string=hai) anos
050-lcp-ami-sharing b1f4b5b249 Fix git reference %!s(int64=4) %!d(string=hai) anos
072-salt-master-inventory-role 9e0eebc2b9 Updates the GitHub URL %!s(int64=4) %!d(string=hai) anos
075-codebuild-ecr-base 9e0eebc2b9 Updates the GitHub URL %!s(int64=4) %!d(string=hai) anos
080-codebuild-ecr-sample 9e0eebc2b9 Updates the GitHub URL %!s(int64=4) %!d(string=hai) anos
081-codebuild-rpm-collectd 9e0eebc2b9 Updates the GitHub URL %!s(int64=4) %!d(string=hai) anos
085-codebuild-ecr-customer-portal 9e0eebc2b9 Updates the GitHub URL %!s(int64=4) %!d(string=hai) anos
090-codebuild-rpm-tmux 9e0eebc2b9 Updates the GitHub URL %!s(int64=4) %!d(string=hai) anos
095-codebuild-rpm-aws-efs-utils 9e0eebc2b9 Updates the GitHub URL %!s(int64=4) %!d(string=hai) anos
100-codebuild-rpm-syslog-ng 9e0eebc2b9 Updates the GitHub URL %!s(int64=4) %!d(string=hai) anos
105-codebuild-ecr-mcas-container 9e0eebc2b9 Updates the GitHub URL %!s(int64=4) %!d(string=hai) anos
disabled 9e0eebc2b9 Updates the GitHub URL %!s(int64=4) %!d(string=hai) anos
us-gov-west-1 1a75cbf9f1 LCP AMI Sharing in us-gov-west %!s(int64=4) %!d(string=hai) anos
README.md e9366e6600 Merges mdr-common-services and afs-mdr-common-services-gov directories %!s(int64=5) %!d(string=hai) anos
account.hcl 47a726ef84 Adds a splunk_prefix variable and a "client" tag to accounts %!s(int64=4) %!d(string=hai) anos

README.md

Common Services - GovCloud

I'm not sure if this is a helpful readme or not tbh

Authentication

A handful of these need the static access keys for the MDRAdmin account, mostly because at that point of setting up a new AWS account we don't have the okta integration in place.

Subfolders / subprojects

Subdirectory auth Purpose
000-mdradmin-bootstrap MDRAdmin + aws-mfa Configures MDRAdmin Account to have IAM rights to create terraform state
001-tfstate MDRAdmin + aws-mfa Creates TF state s3 bucket, dynamodb tables
005-iam okta + saml2aws Fundamental IAM setup - does OKTA linkage, sets up user roles and policies