Jeremy Cooper [AFS MBP] 277c88dca3 Updates tfsec & checkov ignores + syntax updates 3 vuotta sitten
..
005-iam 5cea7b75ca Updates tag for IAM tfsec Ignore Comments and legacy URL for IP list 3 vuotta sitten
006-account-standards 30d29f3ed6 Adds github-runners to test; Updates Account Standards Everywhere 3 vuotta sitten
006-account-standards-regional 1519a2cd30 Migrated most variables out of xdr-terraform-live and into xdr-terraform-modules 3 vuotta sitten
007-backups 1519a2cd30 Migrated most variables out of xdr-terraform-live and into xdr-terraform-modules 3 vuotta sitten
010-vpc-vmray 51f121668c Updates Modules Affected by Fred's IP Change 3 vuotta sitten
023-dns-resolver-instance 277c88dca3 Updates tfsec & checkov ignores + syntax updates 3 vuotta sitten
044-VMRay-Instances 277c88dca3 Updates tfsec & checkov ignores + syntax updates 3 vuotta sitten
072-salt-master-inventory-role d8231ee65c Updates IMDS syntax & ECR encryption syntax | tfsec/chekov ignores 3 vuotta sitten
README.md f6509ccb11 Adds a resolver instance to the VMRay VPC 3 vuotta sitten
account.hcl 5cea7b75ca Updates tag for IAM tfsec Ignore Comments and legacy URL for IP list 3 vuotta sitten

README.md

mdr-prod-malware

Account for hosting vmray and/or other malware detonation.

NOTE ON DNS

DNS resolvers exist in this account, in the vpc 010... However, the vpc relies on having dns resolvers to set the DHCP options.

So chicken/egg.

Here's how to do it.

1) Create the vpc with the default var.dns_servers. 2) Create the resolver 3) Update the VPC, overriding var.dns_servers with the IP from #2